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ABSTRACT 



A memory system in which two or more memory mod- 
ules containing the same information have their respec- 
tive data outputs connected to the same data line. Each 
module includes means for checking the parity of the 
data being read-out at its output and in the event of a 
parity error indication effectively disconnects its output 
from the data line. 

4 Claims, 4 Drawing Figures 
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MEMORY SYSTEM WITH REDUNDANCY FOR 
ERROR AVOIDANCE 

This invention relates to a memory system and in 5 
particular to the detection of errors and the avoidance 
of faulty read-outs from the memory system. 

In many data handling systems several semiconduc- 
tor integrated circuits (IC*s) defined herein as "subsys- 
tems** are interconnected to form a memory system. 10 
Each IC, or chip, may contain anywhere from IK to 
more than 64K bits of information and is gnereally re- 
ferred to as a large scale integrated (LSI) circuit or a 
very large scale integrated (VLSI) circuit. 

The advent of LSI and VLSI circuits has introduced 15 
new problems in the areas of reliability and testability at 
the subsystem level. Some are a consequence of reduc- 
ing the size of the memory cells. The resulting smaller 
nodal capacitances render the memory cells more sus- 
ceptible to data upset by noise and radiation effects. 20 
Also, due to the smaller memory cells and larger bit line 
capacitances, smaller bit line signal swings are produced 
increasing the possibility of errors in reading (sensing) 
the stored information or in writing the desired informa- 
tion. Consequently, the probability of errors is signifi- 25 
cantly increased due to the large (and ever increasing) 
number of cells in each IC (i.e. subsystem) and to the 
increased number of sources of error. The probablity of 
errors is compounded when several of these subsystems 
are combined to form a memory system. 30 

The reliability of the memory system may be im- 
proved by using known error detection and correction 
circuitry. For example, large main frame computer 
systems may make use of Hamming or other high order 
error detecting and correcting codes to produce reliable 35 
and testable memory systems. However, the use of such 
codes add significantly to the circuit complexity, and 
limit the speed of operation of the memory systems. 
Also, these codes generally can only correct one error. 
An object of the present invention is to provide fault 40 
detection which is simple and does not limit the speed of 
operation of the memory system. 

A memory system embodying the invention includes 
two or more memory modules containing the same 
information which have their respective data outputs 45 
connected to the same data line. Each module includes 
means for checking the parity of a group of bits contain- 
ing a particular data bit (or bits) being read-out of the 
module. In the event of a parity error indication, means 
within each module prevent read-out of information 50 
from the module onto the data line. If the parity signal 
is correct the particular data bit (or bits) is read-out onto 
the data line. 

In the accompanying drawing like reference charac- 
ters denote like components, and 55 

FIG. 1 is a block diagram of a memory system em- 
bodying the invention; and 

FIGS. 2A, 2B and 2C are diagrams of portions of a 
subsystem embodying the invention used to practice the 
invention; 60 

The memory system of FIG. 1 includes 8 sets (i ~ 8) 
of two memory chips (Mij), where M identifies a mem- 
ory chip, i the chip set, and j the chip within a set. Two 
chips (e.g. MH and M12; - - - M81 and M82) are shown 
per set for ease of illustration. However, more than two 65 
chips could be used per set to increase the system relia- 
blity and the number of errors that can be detected and 
corrected). The data input (lij) of each chip is con- 



nected to its data output (Oij) and the I/Oij terminals of 
the chips of a set are connected to the same data bus line. 
DBi. Information to be written into each set of chips is 
applied to the data bus lines by a microprocessor or 
other source (not shown). Consequently, the same in- 
formation is written into each chip of a set and, assum- 
ing error free operation, the same information should be 
read-out from each chip of a set. Consequently, barring 
any error or defect, each chip of a set stores an identical 
copy of the data stored in the other chips of a set. As 
detailed below, each chip Mij includes means for read- 
ing-out a data bit (Dij) onto a data bit line DBi and for 
reading a selected internal word which includes the 
data bit (Dij). The chip also includes means for deter- 
mining whether or not the parity of the selected internal 
word is correct and for producing a parity signal indica- 
tive thereof. If the parity signal indicates the presence of 
a parity error the data bit (Dij) of the chip (Mij) is not 
read-out onto the data bit line (DBi). This is accom- 
plished by coupling the data bit (Dij) of each chip (Mij) 
to its corresponding data bit line (DBi) via a tri-state 
circuit (G6ij in FIG. 2B) which is controlled by the 
value of the parity signal and the data bit (Dij). If a 
parity error is detected, the tri-state circuit output is set 
to a floating condition whereby the chip output appears 
as a high output impedance and is effectively removed 
or disconnected from the circuit. Thus, whenever a 
chip contains an error it has little if any effect on the 
signal applied to its corresponding data bit line. The 
other chip (or chips) connected to the data bit line then 
determines the signal of the line. For example, assume 
that chips Mil and M12 are addressed whereby a se- 
lected internal word is read in each chip and concur- 
rently, a particular data bit contained within each se- 
lected word is selected for read-out. A parity check on 
the selected internal word is performed within each 
chip. If the parity check in chip Mil indicates the pres- 
ence of a parity error, the data bit (Dll) from chip Mil 
will not be read-out onto DBi. Assuming the parity 
check in chip M12 indicates no parity error, the data bit 
(D12) from chip M12 will be read-out and applied to bit 
line DBI. 

The detailed operation of the system of FIG. 1, as 
well as some significant features in the construction and 
partitioning of the chips is best understood by first ex- 
amining FIGS. 2A, 2B, and 2C which detail part of the 
contents of each one of the Mij chips. As shown in 
FIGS. 2A, 2B and 2C each Mij module includes: 

(1) A Random Access Memory (RAM) array 8 com- 
prised of 16,384 memory cells 9 arranged in 128 rows 
(words) and 128 columns (bits). There is a word line 
(Wr) per row of cells and a bit conductor (Bj) per col- 
umn of cells. Each row of array 8 is partitioned into 4 
"internal" words or sections, respectively designated A, 
B, C, and D, of 32 bits (columns). So organized, array 8 
is effectively partitioned into 512 (i.e. 128x4) "internal" 
words of 32 bits each. In array 8, each memory cell 9, as 
set forth in copending applications entitled MEMORY 
SYSTEM WITH ERROR DETECTION AND COR- 
RECT bearing Ser. No. 362,463 and MEMORY SYS- 
TEM WITH ERROR STORAGE bearing Ser. No. 
362,464, may be a static cell, a dynamic cell, a read-only 
memory cell, a non-volatile cell, or any other suitable 
storage cell. 

(2) A parity array 14 (as shown in FIG. 2A) having 
512 bit locations at which are found memory or storage 
elements which may be of the same type as those in 
array 8 or which may be any other suitable data storage 



BNSEX3CID: <US_4464754A1J^ 



4,464,754 



devices. Each bit location of array 14 stores a parity bit 
corresponding to an "internal" 32-bit word of array 8. 
Array I*' is arranged in 128 rows and 4 columns, the 
elements of each row of array 14 being connected to a 
row (word line) conductor connected to a correspond- 
ing word line conductor of array 8, and the elements of 
each column of elements being connected to a column 
(bit) conductor, B^, B^, Bo and B/?. Each bit conductor 
of array 14 corresponds to a like lettered section in 
array 8. 

(3) A latching array 28, as shown in FIG, 2B, which 
may be similar to a parity array 14 and like array 14 
includes 512 bit locations, one location for each internal 
word of array 8. A storage or memory element 13 is 
located at each bit location of array 28. The elements 13 
may be of the same type as those in array 8 and 14 and 
may be set to the "0" or "T* condition. In the discussion 
to follow it is arbitrarily assumed that an element 13 in 
a given location of array 28 set to "0** indicates no par- 



an amplifier SA/> to one input of a two-input Exculsive- 
OR gate Glij. Thus, when a 32 bit word is read -out of 
array 8 onto bit lines BLl through BL32, a parity bit 
(Zp) stored in array 14 corresponding to that word is 
5 read-out onto line 16L and applied to Glij. 

Similarly, the 4 bit conductors of latch array 28 are 
multiplexed via corresponding transmission gates TRA, 
TRB, TRC and TRD in section 16R onto latch line 
29L. Only one of TRA, TRB, TRC and TRD is turned- 
10 on at any one time, being turned-on only when its corre- 
sponding like lettered group 16A, 16B, 16C or 16D is 
turned-on. The signal on line 29L is applied via an am- 
plifier 32 to one input of a two-input OR gate34//. Thus, 
when a 32 bit word is read-out of array 8 onto bit lines 
15 BLl through BL32, a signal stored in array 28 corre- 
sponding to that word is read-out onto line 29L and 
applied via an amplifier 32/ to OR gate 34// 

(6) 32 sense amplifiers and latches (SAj) coupled to 
the bit lines for amplifying the 32 bits of a selected 



ity error in array 8 corresponsing to that bit location, 20 ''internal'* 32 bit word. The signals on bit lines BLj are 



whereas if the element is set to "1" it indicates a parity 
error in the corresponding internal word of array 8. 
Element 13, once written to the binary "T* state, perma- 
nently stores that condition until a system erase condi- 
tion is established. The "permanent** storage can be 25 
achieved in any one of a number of ways as, for exam- 
ple, by the choice of cell used in array 28 or by the 
mode of writing information into the cells. 

The elements of array 28 are arranged in 128 rows 
and 4 columns. The elements 13 of each row of array 28 30 
are connected to a row (word line) conductor con- 
nected to a corresponding word line conductor of ar- 
rays 8 and 14 and the elements of each column are 
connected to a corresponding column (bit) conductor, 

C5, Cc, and Cz?. Each bit conductor of array 28 35 
corresponds, to a like lettered section in arrays 8 and 14. 

(4) A word line decoder 101 (as shown in FIG. 2A) to 
which 7 address bits (Ao to A6) are applied is coupled to 
the row conductors of arrays 8, 14 and 28. In response 



amplified by their corresponding sense amplifiers SAj 
to produce well defined binary levels at their Sj outputs. 
That is, either a "low** level is produces, where the low 
level is a voltage at or close to ground potential which 
is arbitrarily defined as logic "0** or "0"; or a "high** 
level is produced, where the high level is a voltage at or 
close to Vdd volts which is arbitrarily defined as logic 
"r* or "r*, and where Vdd is assumed positive with 
respect to ground. 

(7) A bit decoder 20 is coupled between the Sj out- 
puts and a data bit output for selecting a single "raw** 
data bit out of a selected "internal** 32-bit word and 
producing the "raw** data bit output (Dij). Output Dij is 
denoted herein as "raw** because it is coupled to tri-state 
circuit G6ij before being applied to the chip output (Oij) 
from which it is coupled via its data bus (DBi) to a a 
microprocessor (not shown) or other data handling 
systems "external*' to the memory chip. 

(8) A bit predecoder 105 to which are applied 5 ad- 



to address bits Ao through A6 decoder 101 enables one 40 dress bits (A9 and A 13) is coupled to decoder 20 and 



row, at a time, of the 128 rows of arrays 8, 14 and 28 

(5) An internal word and parity bit selector 16, com- 
prised of sections 16A, 16B, 16C, 16D, 16P and 16R, is 
coupled to arrays 8, 14 and 28 for selecting a particular 
"internal** word and its corresponding parity bit. Selec- 45 
tor 16 is controlled by an internal word predecoder 103 
to which two (2) address bits (A? and Ag) are applied. 
The two address bits (A7 and As) determine which one 
of the four sections (i.e. which group of 32 bits) or array 
8 and which column conductor of arrays 14 and 28 is 50 
respectively coupled to the thirty-two bit lines (BLj), 
onto parity line 16L, and onto line 29L. Selector 16 
includes one transmission gate per bit conductor in 
arrays 8, 14. and 28. Selector 16 is partitioned so that 



controls bit decoder 20 to select a particular data bit Dij 
out of the 32 bit "internal** word. 

(9) A section for parity checking and data output 
control is shown in FIG. 2B. Included is a parity gener- 
ator 21 having 32 inputs to which are applied the 32 Sj 
signals. Therefore the 32 bits of a selected internal word 
are applied, after amplification, to generator 21 which 
has an output (021) at which is produced a signal Zg 
which represents the parity of the 32 bit "internal** 
word. The output Zg of generator 21 and the corre- 
sponding parity bit Zp derived from the output of the 
internal word parity selector 16P are applied to the two 
inputs of gate Glij. The parity generator 21 and X-OR 
gate Glij together comprise a parity checker. The out- 



corresponding to each section (A, B, C, D) of array 8 55 put (OGlij) of Glij (which when it is equal to a "1** 

there is a corresponding section (16A, 16B, 16C and indicates a parity error) is applied to the other input of 

16D). Under the control of address bits A7 and Ag and OR gate 34//. 

decoder 103 only one of sections A, B, C, and D is The output 034ij gate 34// is applied to the input of an 

turned-on at any one time, whereby only 32 (one sec- inverter G5ij. The output OG5ij of G5ij and the "raw**- 

tion) of the 128 bit conductors of array 8 are coupled, at 60 ]Dij data output are applied to the two inputs of a tri- 

any one time, via transmission gates to the 32 bit lines state circuit G6ij whose output (Oij) is applied to a 

(BLl through BL32). Similarly, the 4 bit conductors of corresponding data bus (DBi) line. As detailed below 

parity array 14 are multiplexed via corresponding trans- and in copending application MEMORY SYSTEM 

mission gates Ta, Tj, Tc and Td in section 16P onto WITH ERROR STORAGE, referred to above, and 

parity line 16L. Only one of T^, T5, Tc and Td is 65 whose teachings are incorporated herein by reference, 

turned-on at any one time, being turned-on only when the output 034ij will be "high** or "1** whenever there 

its corresponding like lettered group 16A. 16B, 16C or is a present or past parity error associated with the 

16D is turned-on. The signal on line 16L is applied via internal word being read and one of whose bits (Dij) is 
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being read-out and 034ij will be "low'* or **0" when 
there is no parity error associated with the internal 
word. 

The output OGSij of gate G5ij is applied to one input 
of a two-input NAND gate G7 and to the input of an 5 
inverter 17. The output of inverter 17 is applied to one 
input of two-input NOR gate G8. The other input to 
NAND gate G7 and to NOR gate G8 is the raw data 
(Dij). The output (OG7) of gate G7 is applied to the 
gate electrode of an insulated-gate field-effect transistor \q 
(IGFET) P2. The output OG8 of NOR gate G8 is ap- 
plied to the gate electrode of an IGFET N2. The source 
drain path of P2 is connected between a source of oper- 
ating potential Vdd and the chip output Oij and the 
source drain path of transistor N2 is connected between 15 
Oij and ground potential. Transistors N2 and P2, when 
turned-on, are capable of clamping Oij and DBi to 
ground and Vdd* respectively, via their relatively low 
ON-impedance. When turned-off, N2 and P2 appear as 
high impedances and have little, if any, effect on the 20 
output Oij and DBi. 

The operation of the tri-state circuit G6ij, detailed in 
TABLE A below, is such that whenever 034ij is "high- 
— indicating the presence of a parity error in the se- 
lected internal word containing the data bit Dij being 25 
read-out— P2 and N2 are turned-off and the output Oij 
floats. That is, Oij is coupled to Vz)£)and ground via the 
high impedances of turned-off transistors N2 and P2. 
Whenever 034ij is *iow" — indicating no error in the 
selected internal word containing the data bit (Dij) 
being read -out — Oij will be clamped to Vdd or to 
ground via the low ON-impedance of P2 or N2 as dic- 
tated by the value of Dij. 

TABLE A 



034ij 


OGSij 


Dij 


OG7 


OG8 


P2 


N2 


Oij 


(Error) Hi 


Disable 


HI 


HI 


LO 


OFF 


OFF 


Floating 




LO 














(Error) Hi 


Disable 


LO 


HI 


LO 


OFF 


OFF 


Floating 




LO 












(No Error) 


Enable 


HI 


LO 


LO 


ON 


OFF 


HI 


LO 


HI 














(No Error) 


Enable 


LO 


HI 


HI 


OFF 


ON 


LO 


LO 


LO 
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When 034ij is high, OGSij low causes OG7 to be 
high and OG8 to be low. When OG7 is high P2 is 
turned-off and when OG8 is high N2 is turned-off. 
When P2 and N2 are turned-off Oij is left to float. When 
034ij is low, OGSij is high and the tri-state circuit is 
enabled. The output Oij is then driven to assume the 
same binary state as Dij. That is when Dij is high (logic SO 
**V') transistor P2 is turned-on clamping Oij to V/>/) via 
its relatively low-ON-impendance while N2 is turned- 
off Where Dij is low (logic **0") transistor P2 is turned- 
off while N2 is turned-on clamping Oij to ground via its 
relatively low-ON-impedance. 55 

Assume, for example, that OGll of chip Mil is high 
indicative of the presence of a parity error in the inter- 
nal word read in chip Mil. Oil will then be floating in 
that N2 and P2 of G611 will be turned-off. Assume that 
OG 1 2 of chip M12 is low indicating that the parity of its 60 
internal word is correct. 012 will then be driven to 
Vopor ground depending on the value of D12. Hence, 
correct data is applied to DBI since any false or sus- 
pected data present in Mil is inhibited or prevented 
from being applied to DBI. 65 

It has thus been shown that when there is a parity 
error associated with an internal word, any data bit in 
that word is suspect and none of the data bits in that 



word will be read-out to an external source or user. It is 
only when the parity of the internal word is correct that 
the bits of that internal word will be relied upon to 
apply an output signal to an external source or user. 

The writing of information into the RAM array 8, the 
generation of a parity bits and their storage in parity 
array 14, the read-out of information and parity check- 
ing and storage will now be discussed in greater detail. 

As mentioned, OGlij indicates whether or not a par- 
ity error exists in an internal word. The information 
present at OGlij is written into array 28 by means of a 
network 30 which includes an inverter 131, a two-input 
NAND gate N31 and two insulated-gate field-effect 
transistors (IGFETs) PI and Nl. OGlij is applied to 
one input of gate N31 while a control signal (CTl) 
generated by a microprocessor or other source (not 
shown) is applied to the other input of N31 and to the 
input of inverter 131. The output OI31 of 131 is applied 
to the gate electrode Nl and the output ON31 of N31 is 
applied to the gate electrode of PI. The source-drain 
path of PI is connected between a source of V^jp volts 
and line 29L and the source-drain path of Nl is con- 
nected between line 29L and ground. Transistors Nl 
and PI are relatively large devices capable, when 
turned-on, of clamping line 29L to ground or V/j/j, 
respectively, via a relatively low impedance. 

Circuitry needed to write information into memory 8 
and parity array 14 is shown separately in FIG. 2C to 
simplify the drawings. 

Referring to FIG. 2C, when a new data bit li is to be 
written into the memory 8 a decoder 107 is first ener- 
gized in response to a logical product signal CS»WE 
(where CS=chip select and WE = write enable) from a 
microprocessor or other source (not shown). Decoder 
107 has 5 address inputs (A9 through A13) and 32 out- 
puts. Each one of the 32 outputs is connected to a differ- 
ent write amplifier (WAj). The write amplifiers are 
connected at their inputs to an input signal line and at 
their outputs to a bit line BLj, They are, preferably, low 
output impedance tri-state devices capable of overrid- 
ing and overwriting the information on their associated 
bit lines. In response to any selected 5 bit address (A9 
through An) applied to its inputs, decoder 107 enables 
one of the write amplifiers called for by that address. 

It should be noted that during a write cycle (in fact, 
just before a new bit is actually written into a memory 
location) a read is performed. That is, an internal word 
called for by addresses Ao-Ae and A7-A8 is read-out 
onto the bit lines (BLj). The selected write amplifier in 
response to li writes over the information read-out on 
its associated bit line. The information on the 32 bit lines 
thus includes 3 1 old bits of information and one new bit 
of information. 

Consequently, when a new data bit is being written 
into a chip, the data bit being written becomes part of an 
"internal" word. The "new" internal word is coupled 
via the SAj amplifiers to parity generator 21. A new 
parity bit corresponding to the parity of the "new" 
internal word is generated at the output 021 of parity 
generator 21 which is the same parity generator 21, used 
during the read cycle. The "new" parity bit Zg at the 
output of generator 21 is applied via a write amplifier 
WAp onto line 16L and is then written and stored in a 
given location of parity array 14 corresponding to the 
location of the selected internal word. Note that WAp 
is controlled by the CS»WE signal, whereby WAp is on 
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regardless of which WAj amplifier is selected by de- 
coder 107. 

It is ^sumed that the RAM array 8 is organized into 
internal words, each having a length of 32 bits and that 
corresponding to each internal word there is a parity bit 5 
stored in array 14. Whenever a particular data bit loca- 
tion is addressed and its bit is to be read out, the 32 bit 
internal word in which the particular data bit is con- 
tained is read-out and is applied to the inputs of a parity 
generator 21. The output Zg of the parity generator 21, 10 
indicative of the parity of the internal word, is applied 
to X-OR gate Glij. The parity bit Zp stored in array 14 
corresponding to the 32 bit internal word is also read- 
out and is applied to the other input of gale Glij, 

Concurrently, the 32-bit internal word is further de- 15 
coded in decoder 20 to produce at the output of 20 the 
particular **raw*' data bit (Dij) corresponding to the 14 
address bits applied to the system. The output, OGlij, 
of Glij indicates whether parity is correct. As shown in 
table 1 below, if OGlij is a logic "zero", there is no 20 
parity error in the "internal" 32-bit word read-out of the 
memory. If OGlij is a **V\ there is a parity error in the 
"internal" word read-out of the memory. OGlij indi- 
cates the status of the parity of the "internal" word at 
the chip or subsystem level. Therefore OGlij functions ^5 
as an error flag indicating whether an error exists in one 
of 33 bits, where the 33 bits include the 32 bits of the 
"internal" word read-out and its corresponding parity 
bit. 

30 

TABLE 1 







OGlij 






0 


0 
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Match - 


No Error 


I 


0 


1 


Error 




0 


1 




Error 




1 


I 


0 


Match - 


No Error 
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OGli is applied to one input of OR gate 34 and to one 
input of NAND gate N31. 

As noted above, if OGlij indicates the presence of an 40 
error, there is no mechanism for (immediately) correct- 
ing the faulty bit in the internal word. If subsequently a 
"new" data bit is written into the faulty internal word, 
a new parity bit will be generated and stored in parity 
array 14. When the "new" data bit is then read-out the 45 
error flag OGlij will indicate no error when in fact the 
error may still be present in the internal word. In the 
present system such an error continues to be indicated. 
It is stored in array 28 and its operation and the opera- 
tion of the associated write and read networks are now 50 
detailed. 

The type of information written into array 28 is deter- 
mined by control signal CTl and the output OGlij. 
When CTl is low, OI31 is high and Nl is turned-on 
clamping line 29L to ground. Concurrently, when CTl 55 
is low, (regardless of whether OGlij is high or low) 
ON31 is high maintaining PI turned-off. 

When CTl is low, the signal 029 on line 29L is low; 
every bit location in memory array 28 can be addressed, 
via word lines Wl through W128 and column conduc- 60 
tors Ca, Cb, Ccand Cz>» and a "0" written into each bit 
location. The all "0" condition of array 28 corresponds 
to the initial condition to which array 28 is set and also 
indicates the absence of any error in array 8. Following 
the initializing of latch array 28, CTl is driven high. 65 
The output of 131 then goes low maintaining Nl turned- 
off. Since N 1 is turned-off, line 29L cannot be driven to 
the zero volt of "0" condition and *'0*s" can no longer 
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be written into array 28; (i.e. only "TS" can be written 
into memory 28). 

CTl-high applied to one input of gate N31 causes the 
latter to function as an inverter with respect to the 
OGli signal. When OGIi is low— indicating that there 
is no parity error in the internal word addressed by the 
memory system (i.e. a match exists between Zp and 
Zg)— ON31 is high and PI remains turned-off. Concur- 
rently, OI31 is also low and Nl is also turned-off. 
Hence, PI and Nl are turned-off and appear as very 
high impedances connected between line 29L and their 
respective power lines. Due to the high impedances of 
PI and Nl, the voltage on line 29L is determined by the 
condition of the addressed memory cell of array 28. 
Any addressed storage element in array 28 will then 
remain in the previously written "0" (or "1") condition. 

When OGlij goes high — indicative of a parity er- 
ror — ON31 is driven low and PI is turned-on clamping 
line 29L to Vdd volts or "high". The bit location in 
array 28 corresponding to the selected "internal" word 
in array 8 will then be written to the high or "1" state. 
Once written to the "I" state, the storage element re- 
mains high until CTl is again driven low. Barring the 
generation of a CTl-low signal, a bit location in array 
28 once written high remains high. The condition of line 
29L for the different possible values of CTl and OGlij 
is summarized in Table 2 below. 



TABLE 2 



CTI 


OGli 


PI 


Nl 


029 


LO 


HI 


OFF 


ON 


Active LO 


Lb 


LO 


OFF 


ON 


Active LO 


HI 


LO 


OFF 


OFF 


Floating 


HI 


HI 


ON 


OFF 


Active HI 



The role of array 28, during a read cycle, after a "1" - 
has been written in a bit location of array 28 is now 
examined. 

On a subsequent read cycle, if a once faulty internal 
word of array 8 is again addressed, the "1" stored in a 
corresponding bit location in array 28 is addressed and 
produced on line 29L. It is then sensed via amplifier 32 
and applied to one input of OR gate 34// The output of 
gate 34/y thus indicates the existence of a present or past 
error whenever a faulty or once faulty internal word is 
selected. 

Thus, once an error has been detected in an internal 
word, there is an error flag stored in array 28 which will 
be produced whenever that internal word location is 
addressed. The error indication will persist until the 
system is cleared by driving CTl low and cycling 
through the addresses of array 28. After an error in an 
internal word is detected and stored on array 28 a new 
data bit may be written into the previously faulty inter- 
nal word, and a new parity bit corresponding to the 
"new" internal word is generated and stored in parity 
section 14. Assuming that no error creeps into the new 
internal word and/or the associated parity bit, the par- 
ity for the new word will be correct (OGli=0), But, 
assumming the error previously detected in this word 
has not been corrected, there is still an error in the word 
even though the parity checker 21, Glij says that parity 
is correct. This error is indicated in the present system 
by the output (034ij) of OR gate 34 which is high. 

As discussed earlier the output of OR gate 34/y is then 
used to disable or enable the tri-state gate G6ij. 

For ease of illustration the tri-state circuit G6ij has 
been shown with two input signals, OG5i, and Dij. 
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OG5ij functions as an enable/disable control signal, and 
Dij is the data input. It should be appreciated that, in 
practice, other signals (not shown) are applied to the 
tri-state circuit, directly or indirectly, to selectively 
disable it as, for example, during write and when the 5 
chip is not selected. Also, in practice, the OG5ij output 
could be brought out to a separate pin on the chip from 
which it could be selectively coupled to generate a chip 
select or deselect signal fed back to control chip func- 
tions. 10 

Unlike Hamming code correction, two level parity 
code correction, or other known techniques, the present 
error avoidance technique can be extended to detect 
and correct two or more errors. To protect against two 
errors on two different chips three chips would be used 
with their I/O terminals being connected to the same 
data line. Correction to protect against two errors 
within the same internal word on the same chip, an 
internal two level parity check could be used or any 20 
other suitable error detection scheme. A singular ad- 
vantage of circuits and systems embodying the inven- 
tion is that the error bit does not have to be located. It 
is sufficient to detect an error in a group of data bits. 
There is no need to identify which bit is faulty. This 25 
enables a single and fast system to be built. The error 
avoidance system is also readily adaptable for use with 
memory chips whose output are "byte" wide (each byte 
having 4 or 8 bits wide in comparison to the chips 
shown in FIGS. 1 and 2 having a single output) where 30 
conventional Hamming code correction systems are 
defeated by multiple bit failures on a single chip. 

What is claimed is: 

1. A memory system comprising: 

a common bus adapted to receive data signals; 35 
N memory modules, where N is an integer greater 
than one, each one of said N memory modules 
being operated in parallel with the same informa- 
tion being written in their corresponding bit loca- 
tions, each one of said N modules including; 40 

(a) a random access memory (RAM) array and 
organized into W internal words, each word 
having L bits; 

(b) a parity array for storing a parity bit for each 
internal word; ^5 

(c) means coupled to said RAM array for selec- 
tively reading a selected internal word and for 
concurrently reading-out onto a data output line 
a selected bit contained within said selected in- 
ternal word; 

(d) means receptive of a selected internal word and 
its corresponding parity bit for ascertaining 
whether its parity is correct and for producing a 
first output signal indicative thereof; 

(e) selectively enabled means within each module 
for coupling its data output line to said common 
bus; and 

(0 control means within each module, coupled to 
said selectively enabled means, responsive to 60 
said first output signal for disabling said selec- 
tively enabled means and preventing the applica- 
tion of said selected bit to said common bus 
when said first output signal has a value indica- 
tive of a parity error. 55 
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2. The memory system as claimed in claim 1 wherein 
said selectively enabled means includes a tri-st^te. circuit* 
receptive of said first output signal and said selected bit 
and having an output coupled to said common bus, said 
tri-state being set to a high output impedance condition 
when said first output signal is indicative of a parity 
error and said tri-state output being driven to a binary 
condidon responsive to the value of said selected bit 
when said first output signal is indicative that the parity 
is correct. 

3. A memory system comprising: 
a common bus structure; 

N memory modules, where N is an integer greater 
than 1, and where the same information is written 
into each one of said N modules, 

and where the N modules are read-out in parallel, 
each one of said N modules including: 

(a) a random access memory (RAM) array orga- 
nized into W internal words, each word having 
L bits; 

(b) means for generating a parity bit for each inter- 
val word and a parity array for storing each one 
of said parity bits; 

(c) means coupled to said RAM for reading-out a 
selected internal word and for concurrently 
reading-out a particular subset of the L bits in 
said internal word; and 

(d) means receptive of a selected internal word and 
its corresponding parity bit for ascertaining 
whether its parity is correct and for producing a 
first output signal indicative thereof; 

(e) selectively enabled means within each module 
for coupling said particular subset of the L bits to 
said common bus structure; and 

(0 means within each module responsive to said 
first output signal when it is indicative of a parity 
error in the selected internal word for disabling 
said selectively enabled means and preventing 
the application of said particular subset of the L 
bits to said common bus structure, and respon- 
sive to said first output signal when it is indica- 
tive of no parity error for enabling said selec- 
tively enabled means. 

4. A memory system comprising: 

a common line; 

**N** similar memory modules having means for stor- 
ing data bits and each module having a data output 
connected to said common line; where N is an 
integer greater than 1; 

means for writing the same information into said N 
memory modules; and 

reading means for subsequently reading, in parallel, 
supposedly identical information stored in said N 
modules; said reading means including means lo- 
cated in each module for checking the parity of the 
information being read-out of each module and also 
including means for coupling the information from 
said module to said common line if the parity check 
indicates it to be correct and for inhibiting the 
passage of information to said common line if the 
parity check indicates the presence of an error, 
whereby only data bits whose corresponding par- 
ity indicates them to be correct are coupled from 
said N modules to said common line. 
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Description 

RADIATION RESISTANT LOGIC CIRCUIT 



Technical Field 

This invention relates to semiconductor electronic circuits and 
5 more particularly to semiconductor logic circuits. 



Background Art 

A single event upset (SEU) is the result of an ion transitioning 
through a semiconductor structure and depositing charge on a critical 
circuit node within that structure. In a CMOS logic circuit, this can 

10 cause an unintended switch in the logic state, creating potentially 
catastrophic consequences for the system. In the case of storage 
cells, the primary SEU problem hes in the feedback path, where 
amplification and feedback of noise on a critical node can 
permanently change the cell's logic state. 

15 Known SEU hardening techniques for CMOS logic include the 

use of redundant circuit paths. Dual circuit paths provide redundancy 
and allow implementation of voting schemes to reduce the effect of 
SEUs. However, the typical voting scheme uses digital logic to 
recombine the redundant paths, and thereby actually provides 

20 amplification of the SEU. 
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Disclosure of Invention 

An object of the present invention is to provide a logic circuit 
architecture which has higher rehability in a radiation environment. 

Still another object of the present invention is to provide 
circuitry for a family of logic products having higher reliability in a 
radiation environment. 

According to the present invention, apparatus for performing a 
selected logic function includes a first logic portion which receives 
one or more logic state input signals and performs the selected logic 
function on the logic state input signals to provide one or more output 
signals, and further includes a second logic portion which receives 
the one or more logic state input signals and performs the selected 
logic function on the logic state input signals to provide one or more 
output signals, and further combines each output signal from the first 
logic portion with the corresponding output signal from the second 
logic portion to provide one or more resultant logic output signals. 

In further accord with the present invention, apparatus for 
performing a selected logic function includes an input section which 
receives one or more logic state input signals and provides a pair of 
buffered logic state signals for each, and further includes, a logic 
section having a first and second portion, each receiving one logic 
state signal from each of the pairs of buffered logic state signals, and 
each performing the selected logic function on the logic state signals 
received thereby to each provide one or more output signals, and 
each of said output signals from the first portion combined in analog 
fashion with a corresponding one of the output signals from the 
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second portion to provide one or more logic section output signals, 
and further includes an output section receiving each of the one or 
more logic section output signals and providing one or more resultant 
logic output signals. 

The present invention provides a combinatorial logic circuit 
having higher reliability in a radiation environment The present 
invention further provides circuitry for a family of products having 
higher reliability in a radiation environment with httle impact to the 
die size and no decrease in functionality. 

These and other objects, features, and advantages of the 
present invention will become apparent in light of the following 
detailed description of a best mode embodiment, accompanying 
Drawings, and claims. 

Brief Description of the Drawings 

FIG. 1 is a schematic illustration of a NAND logic 
function, which is used in the description of the present 
invention; 

FIG. 2 is a schematic illustration of the best mode embodiment 
of the present invention as used in the NAND logic function of FIG. 

1; 

FIG. 3 is a schematic illustration of one element used in 
the embodiment of Fig. 2; and 

FIG. 4 is a schematic illustration of another element 
used in the embodiment of Fig. 2, 
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Best Mode for Carrying out the Invention 

The apparatus of the present invention is disclosed with 
respect to a best mode embodiment for use in a logic circuit providing 
the NAND logic function represented in FIG. 1, As should be 
5 understood by those skilled in the art, the drawing figures are only 
schematic representations, and are not intended to portray physical 
details. 

Referring to FIG. 1, in a prior art schematic of a selected logic 
device, a two input NAND circuit 20 receives logic signal A on line 
10 22 and logic signal B on line 24, and produces a NAND logic output 
signal Y on line 26. As known, the logical operation of the NAND 
circuit 20 can be described by the equation Y = NOT(A«B), 

Referring now to FIG. 2, in the present invention's best mode 
embodiment of the NAND circuit 20 of FIG. 1, logic signal A on line 
15 22 and logic signal B on line 24 are each received by an input section 
28 

Each of the logic signals on lines 22, 24 are presented to an 
associated one of a pair of signal conditioning circuits 29a, 29b 
within the input section 28. As described hereinafter, the signal 

20 conditioning circuits 29a, 29b are identical. The circuit 29a has a 

diode 30 which provides protection against logic signal A magnitudes 
less than the lower power supply voltage magnitude Vss, and a diode 
32 which provides protection against logic signal A magnitudes 
greater than the upper power supply voltage magnitude Vdd In the 

2 5 best mode embodiment Vss is approximately zero (0) volts and Vdd 
is in the range of from 4,5 to 5.5 volts. To afford the best protection. 
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the diodes 30, 32 are physically located as close to where the input 
signal on line 22 is received, as is practical. In situations where the 
input signal A on line 22 cannot exceed the magnitude range of the 
power supplies, such as where the source of logic signal A resides on 
5 the same integrated circuit as the NAND circuit 20, the two diodes 
30, 32 may not be necessary. 

The circuit 29a further comprises a series resistor 33 that is 
electrically connected between the diodes 30, 32 and the signal inputs 
a pair of buffer stages 34, 36. The resistor 33 provides electrostatic 

10 discharge protection (ESD) on line 22. The buffer stages 34, 36 each 
receive the ESD protected signal and provide a pair of buffered, 
redundant A signals on lines 38, 40 respectively. The pair of buflfer- 
stages 34, 36 represent independent signal paths, such that, a failure 
in one of the pair of buffer stages 34, 36 will not disturb the logic 

15 signal out of the other. To further this end, in the best mode 

embodiment, the pair of buffer stages 34, 36 are physically spaced 
further apart than normal so that the effect of a single ion 
transitioning through the semiconductor structure is less likely to 
cause single event upset (SEU) in both of the pair of buffer stages 34, 

20 36. 

In the best mode embodiment, the pair of the buffer stages 34, 
36 provide the same logic function, non inverting buffering, and 
comprise logic gates of the same type, so that the pair of buffered A 
signals on lines 38, 40 are substantially similar to each other in logic 
25 state and timing. However, as will be obvious to those skilled in the 
art, one or both of the pair of buffer stages 34, 36 may provide a logic 

5 
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function other than non inverting buffering, so long as suitable 
modificarions are made to other logic, described below, in the NAND 
circuit 20. 

In the best mode embodiment, each of the buffer stages 34 and 
5 36, comprise cascaded first and second inverter 42, 44 and 46, 48, 
respectively. The inverters are shown to be identical. The first 
inverters 42, 46 buffer and invert the logic signal . The second 
inverters 44, 48 restore the logic states of the pair of buffered A 
signals on lines 38, 40 to that of the input signal A on line 22. 

10 Fig. 3 is a circuit for the inverter 42, which comprises a P 

channel MOSFET 42a and an N channel MOSFET 42b. The input 
pin (IN) of the first inverter 42 is electrically connected to the gate 
42c of the P channel and the gate 42d of the N channel MOSFETs. 
The source 42e of the P channel is connected to Vqd and the source 

15 42f of the N channel is connected to Vss The drain 42g of the P 
channel MOSFET is connected to the drain 42h of the N channel 
which then serves as the output (OUT) for the first inverter 42 The 
other inverters 44, 46, 48 have similar transistor level circuits to that 
of the first inverter 42. 

20 The operation of the first inverter 42 is as follows. When the 

signal input at EN is at a high logic state voltage, the N channel 
MOSFET 42b is "on", i.e. its resistance fi^om drain to source is low, 
and the P channel MOSFET 42a is "off \ i.e. its resistance fi^ora drain 
to source is high. At the output, this produces a low resistance to the 

25 Vss supply and a high resistance to the Vdd supply. The result is a 
voltage on the output (OUT), approximately equal to Vss, which 
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represents a low logic state. When IN is at a low logic state voltage, 
the P channel MOSFET 42a is "on" and the N channel MOSFET 42b 
is "off'. At the output, this produces a low resistance to the Vdd 
supply and a high resistance to the Vss supply. The result is a 
5 voltage on the output (OUT), approximately equal to Vdd, which 
represents a high logic state. 

Referring again to FIG. 2, the B input logic signal on line 24 is 
received by signal conditioning circuitry 29b which is similar to that 
described with respect to circuit 29a. Two diodes 50, 52 provide 

10 under voltage and over voltage protection. In situations where the 
input signal B on line 24 can not exceed the range of the power 
supplies the two diodes 50, 52 may not be necessary. A series 
resistor 53 is positioned after the two diodes 50, 52 to provide 
electrostatic discharge protection (ESD) on the input signal B on line 

15 24. The ESD protected input signal is then passed to a pair of buffer 
stages 54, 56 which provide a pair of buffered B signals on lines 58, 
60 respectively. A failure in one of the pair of buffer stages 54, 56 
will not disturb the logic signal out of the other. In the best mode 
embodiment, the pair of buffer stages 54, 56 are physically spaced 

20 further apart than normal so that the effect of a single ion is less likely 
to cause single event upset (SEU) in both of the pair of buffer stages 
54, 56. 

In the best mode embodiment, the pair of buffer stages 54, 56 
provide the same logic function, non inverting buffering, and 
25 comprise logic gates of the same type, so that the pair of buffered B 
signals on lines 58, 60 are substantially similar to each other in logic 
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State and timing. As will be obvious to those skilled in the art, one or 
both of the pair of buffer stages 54, 56 may provide a logic function 
other than non inverting buffering, so long as suitable modifications 
are made to other logic, described below, in the NAND circuit 20. 

In the best mode embodiment, each of the buffer stages 54 and 
56, comprise a first and second inverter 62, 64 and 66, 68, 
respectively. The first inverters 62, 66 buffer and invert the input 
signal B on line 24. The second inverters 64, 68 restore the logic 
states of the pair of buffered B signals on lines 58, 60 to that of the 
input signal B on line 24. All four of these inverters 62, 64, 66, 68 
have similar transistor level circuits to that of the first inverter 42. 
The NAND circuit 20 further comprises a logic section 70 having a 
first portion 72 and a second portion 74. The first and second 
portions 72, 74 each receives one signal fi^om each of the buffered A 
and B signal pairs on lines 38, 40 and 58,60. The first and second 
portions 72, 74 represent independent signal paths, such that, a 
failure in one will not disturb the logic of the other. To this end, in 
the best mode embodiment, the portions 72, 74 are physically spaced 
further apart than normal so that the effect of a single ion 
transitioning through the semiconductor stmcture is less likely to 
cause single event upset (SEU) in both portions 72, 74. 

Each portion 72, 74 comprises the logic necessary to enable it 
to provide the overall logic function of the circuit, e.g. the NAND 
logic flmction of the NAND circuit 20 in the best mode embodiment. 
The appropriate logic depends not only on the overall logic function 
of the circuit, but also on the logical effect of the input section 28 
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buffer stages 34, 36, 54, 56 and the output section, described 
hereinbelow. In the best mode embodiment, the input section 28 
buffer stages 34, 36, 54, 56 and the output section are non inverting 
buffers, and therefore have no logical effect. Consequently, the logic 
5 for the first and second portions 72, 74 of the logic section 70 each 
need only comprise a NAND gate 76, 78, or its equivalent, to provide 
the NAND function. 

A schematic representation of the transistor level circuit for the 
NAND gate 76 of the first portion 72 is shown in Fig. 4. Referring 

10 now to Fig. 4, the NAND gate 76 has a first input 76a which is 
electrically connected to the gates 76b, 76c of a first pair 76d of P 
channel MOSFETs. The first pair 76d of P channel MOSFETs have 
their sources 76e electrically connected to Vod and their drains 76f 
electrically connected to the drains 76g of a second pair 76h of P 

15 channel MOSFETs. The sources 76i of the second pair 76h of P 
channel MOSFETs are connected to Vdd and the gates 76j, 76k are 
connected to the second input signal 761. 

The drains 76f, 76g of both pairs 76d, 76h of P channel 
MOSFETs are further connected to the drains 76m of a first pair 76n 

20 of N channel MOSFETs and the output 76p of the NAND gate 76. 
The first pair 76n of N channel MOSFETs have their gates 76q, 76r 
connected to the second input 761. Each of the sources 76s of the 
first pair 76n of N channel MOSFETs is connected to a dififerent one 
of the drains 76t of a second pair 76u of N channel MOSFETs. The 

25 second pair 76u of N channel MOSFETs have their gates 76v, 76w 
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connected to the first input 76a and their sources 76x connected to 

Vss. 

The operation of the NAND gate 76 is as follows. When both 
of the inputs are at a high logic state voltage, both pairs 76n, 76s of N 
channel MOSFETs are "on", i.e. low resistance, and both pairs 76d, 
76h of P channel MOSFETs are "off', i.e. high resistance. At the 
output 76p, this produces a high resistance to the Vdd supply and a 
low resistance to the Vss supply. The result is an output voltage of 
approximately Vss, representing a low logic state When one or more 
of the inputs 76a, 761 are at a low logic state voltage, the pair 76d, 
76h of P channel MOSFETs having that input connected to its gate 
76b, 76c are "on" and the pair 76n, 76s of N channel MOSFETs 
having that input coimected to its gate are "off'. At the output 76p, 
this produces a low resistance to the Vdd supply and a high resistance 
to the Vss supply. The result is an output voltage of approximately 
Vdd, representing a high logic state. 

Referring again to FIG. 2, the NAND gate 78 of the second 
portion 74 has a similar transistor level circuit schematic (not shown) 
and operation to that of the NAND gate 76 of the first portion 72. 
The first and second portions 72, 74 each operate on their respective 
input signals and produce first and second portion output signals 
which are summed, or combined, in analog fashion to produce a logic 
section output signal on line 84.. The logic section output signal on 
line 84 takes on the logic state corresponding to the voltage of the 
analog combination. This is in contrast to a combination that 
combines the signals by performing a logical operation on each of 
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their logic states. 

In the best mode embodiment, the transistors in the NAND 
gates 76, 78 have "on" resistances in the range of from about 500 
ohms to 5,000 ohms. Lower resistances are not required because the 
NAND gates do not to provide high magnitude output current. 
Accordingly, the connection should have an electrical resistance of 
about less than 500 ohms, preferably less than 10 ohms. In the best 
mode embodiment, a direct electrical connection having a resistance 
below / ohm, specifically about .01 ohms, is used. However, those 
skilled in the art will recognize that other suitable transistors having 
other *'on" resistances , and other connections having other 
resistances may also be used. 

Normally, the transistors of both of the NAND gates 76, 78 are 
in similar "on" and "off' states. Consequently, the voltage 
contributions from the first and second portions to the logic section 
output signal on line 84 are both approximately Vss, or both 
approximately Vdd> and the combined signal, the logic section output 
signal on line 84, is also approximately Vss, corresponding to a logic 
low, or Vdd, corresponding to a logic high. 

Statistically, only one transistor will experience SEU at a given 

time. Thus when an ion transitions through the semiconductor one 

portion 72, 74 of the logic section 70, may experience SEU in one of 

the transistors in its NAND gate 76, 78. That transistor may change 

state from "on" to "off' or "off" to "on". However, any change in 

logic section output signal voltage on line 84, is small, since the 

output from the affected portion is combined, in analog fashion, as 

described above, with the output from the unaffected portion. 
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Consequently, the voltage effect of the SEU is reduced, or attenuated. 
At or below the designed ion energy level of 80 MeVcmVmg, there is 
insufficient energy in the ion to cause the logic section output signal 
on line 84 to transition to an incorrect logic state. Thus the logic 
section output signal on line 84 remains at the correct logic state 
throughout the SEU. The typical SEU lasts for about 20 nano 
seconds after which the transistor experiencing SEU returns to its 
prior state. Capacitance in the output portion, described hereinbelow, 
provides additional filtering for the small voltage changes in the logic 
section output signal on line 84. 

In comparison to the present invention, other approaches, 
which may use a voting stage, tend to amplify the effect of the SEU 
because they first translate the affected signal to its own logic state 
prior to the voting stage, and then in the voting stage, they attempt to 
eliminate the effect of the SEU. These other approaches also require 
more gates, since they require a voting stage and often require three 
voting signals rather than just two, as in the present invention. 

It should be recognized that this approach is not a typical 
method for the combination of logic signals fi"om logic gates having 
active pull ups and pull downs in the output stage. For example, 
while open collector TTL gates may be wired-ANDed, the wired- 
ANDing of active pull up TTL gates is prohibitive due to the high 
power dissipation that occurs if one gate output is high and the other 
gate output is low. Similarly, in ECL logic, gates may be wired- 
ORed but the ECL output stage only has an active pull up and does 
not have an active pull down. However, in the present invention, the 
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output of each CMOS gate does have both active pull up and active 
pull down. 

Furthermore, unlike the TTL and ECL techniques above which 
seek to conserve logic gates while implementing standard logic 
functions, the summation approach of the present invention does not 
operate as a standard logic function. In fact, the summation here 
should not be used for combining logic signals which are not 
substantially similar in state and timing for the very reason that it 
does not provide a normal logical combination. Instead, it provides a 
means for combining substantially similar signals wherein a SEU 
failure in one of the signals does not cause failure of the combined 
signal. 

The logic section output signal on line 84 is passed to an 
output section 86. Nodal capacitance, not shown, on line 84, 
provides some additional filtering for the logic section output signal. 
The output section 86 further comprises a pair of inverters 88, 90 for 
buffering of the signal. The pair of inverters 88, 90 are similar to that 
of the first inverter 42 of the A input signal buffer stage 34 with the 
exception that the transistors sizes are larger to reduce the likelihood 
that they themselves will experience SEU. Larger and stronger 
transistors are better able to resist SEU by counting the collection of 
charge through the substrate that is brought on by the entering ion. 
The pair of inverters 88, 90 are also larger to provide the desired 
capability for driving additional logic circuits that may be connected 
to the output logic signal Y on line 26. The output section further 
includes a pair of diodes 92, 94 to protect against under and over 
voltage damage. 

13 
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As with all circuitry, appropriate decoupling should be used 
when employing the present invention. 

In the best mode embodiment, the NAInID circuit 20 is 
implemented in CMOS technology, preferably L2 micro meters (um) 
5 or smaller, however, any other suitable technology may also be used. 
At 1.2 um the circuit is small enough in size, has relatively low 
power, and provides high speed operation. 

In the best mode embodiment, each of the logic signals on lines 
22, 24, 26 are of the type having CMOS logic levels, however, as 
10 will be obvious to those skilled in the art, the NAND logic circuit 20 
may also be designed to accommodate TTL logic signals. In the 
preferred embodiment, this only requires threshold modifications in 
the input section. 

Although the best mode of the present invention creates the 
15 logic section output signal on line 84 by combining the outputs from 
NAND gates 76, 78, those skilled in the art will recognize that other 
transistor configurations may also be suitable. For example, 
transistor configurations to be connected may also be of the type used 
in inverters. 

20 While the best mode of the present invention includes an input 

section, the logic section of the present invention may also be used 
without the input section or portions of the input section. For 
example, each input logic signal may be routed directly to both 
portions of the logic section, without passing through the input 

25 section, so long as the logic section is suitably adapted for operation 
with the logic levels of the input logic signals. 
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The present invention may also be used without the output 
section of the best mode embodiment. Instead, the logic section 
output signal may be used to drive other logic directly so long as the 
logic section is suitably adapted for driving such other logic. 
5 Although disclosed with respect to a best mode embodiment 

for use in a NAND circuit, the present invention may be used in logic 
circuits of any type, including but not limited to that of OR, NOR, 
XOR, XNOR, inverter, AND, buffer, flip flop, line drivers and 
transceivers, with or without three-state outputs. 

10 Furthermore, while the NAND circuit of the present invention 

has 2 inputs and 1 output, the present invention ;may be used in logic 
circuits having any number of inputs, e.g. N, where N is one or more, 
and any number of outputs, e.g. K, where K is one or more. The 
input section still preferably receives each of the N input signals and 

15 produces a pair of buffered signals for each. One signal from each ■ 
pair of buffered signals is received by the first portion of the logic 
section and the other signal from each pair is received by the second 
portion. Each of the two logic section portions has all of the 
necessary logic gates for implementing the overall function. The first 

20 portion produces K first portion output signals and the second portion 
produces K second portion output signals. Each of the K first portion 
output signals is combined with the counterpart signal from the K 
second portion output signals to produce K logic section output 
signals. The K logic section output signals are passed to the output 

25 section where they are buffered to produce the K outputs for the 
circuit. As such, the present invention may also be used in logic 

15 
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circuits of the type including but not limited to comparators, flip 
flops, decoders/demultiplexers, selectors/multiplexers, counters, shift 
registers, parity generators, adders, and memories. 

Still further, although the best mode embodiment uses signal 
conditioning circuits that provide a pair of buffered signals and logic 
sections having two portions, signal conditioning circuits providing 
more than a pair of buffered signals and logic sections having more 
than two portions may also be used and similarly combined to 
provide even greater immunity to SEU. 

While the particular invention has been described with 
reference to illustrative embodiments, this description is not meant to 
be construed in a limiting sense. It is understood that^ various 
modifications of the illustrative embodiments, as well as additional 
embodiments of the invention, will be apparent to persons skilled in 
the art upon reference to this description without departing from the 
spirit of the invention, as recited in the claims appended hereto. 
Thus, upon understanding the present invention, one of ordinary skill 
in the art could employ the present invention in a variety of logic 
circuit applications. Those skilled in the art will know of the forms 
which are suitable for each application. It is therefore contemplated 
that the appended claims will cover any such modifications or 
embodiments as fall within the true scope of the invention. 

What is claimed is: 
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Claims 

1. Apparatus for performing a selected logic function on one or 
more logic state input signals presented thereto to provide one or 
more resultant logic output signals, comprising: 

a first logic portion, receiving each logic state input signal and 
performing the selected logic function on the logic state input signals 
to provide one or more output signals; and 

a second logic portion, receiving each logic state input signal 
and performing the selected logic function on the logic state input 
signals to provide one or more output signals, and each of said output 
signals fi:"om said second logic portion combined in analog fashion 
with a corresponding one of said output signals fi'om said first logic 
portion to provide the one or more resultant logic output signals. 

2. The apparatus of claim 1 wherein said output signals of said 
first and second logic portions are provided by logic gates having 
outputs with active pull ups and active pull downs. 

3. The apparatus of claim 1 wherein said first and second logic 
portions comprise CMOS technology. 

4. The apparatus of claim 1 wherein said combination in analog 
fashion of said first logic portion output signals and said second logic 

17 
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portion output signals comprises an electrical connection having a 
resistance of about less than 500 ohms. 

5. The apparatus of claim 1 wherein said first logic portion and 
said second logic portion comprise identical logic circuitry. 

6. The apparatus of claim 1 wherein said first logic portion and 
said second logic portion are physically separated to prevent an ion 
fi^om causing SEU in both portions. 

7. The apparatus of claim 1 wherein said combination in analog 
fashion of said first logic j)ortion output signals and said second logic 
portion output signals to produce the one or more resultant output 
signals is inunune to SEU at ion energy levels of up to and including 

5 SOMeVcmVmg. 

8. The apparatus of claim 1 wherein said combination in analog 
fashion of said first logic portion output signals and said second logic 
portion output signals comprises a direct electrical connection having 
a resistance of about less than 1 ohm. 

9. Apparatus for performing a selected logic ftmction on one or 
more logic state input signals presented thereto to provide one or 
more resultant logic output signals, comprising: 
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an input section having a signal conditioning circuit for each of 
the logic state input signals, for providing for each of the logic state 
input signals, a pair of buffered logic state signals; 

a logic section having a first and second portion, each 
receiving one logic state signal from each of said pairs of buffered 
logic state signals, and each performing the selected logic function on 
said logic state signals received thereby to each provide one or more 
output signals, and each of said output signals from said first portion 
combined in analog fashion with a corresponding one of said output 
signals from said second portion to provide one or more logic section 
output signals; and 

an output section receiving each of said one or more logic 
section output signals and providing the one or more resultant logic 
output signals. 

10. The apparatus of claim 9 wherein said output signals of said 
first and second portions of said logic section are provided by logic 
gates having outputs with active pull ups and active pull downs. 

1 1 . The apparatus of claim 9 wherein said first and said second 
portions of said logic section comprise CMOS technology. 

12. The apparatus of claim 9 wherein said combination in analog 
fashion of said first portion output signals and said second portion 



19 



wo 97/40579 



• 

PCT/US97/a6642 



output signals comprises an electrical connection having a resistance 
of about less than 500 ohms. 

13. The apparatus of claim 9 wherein said first portion and said 
second portion of said logic section comprise identical logic circuitry. 

14. The apparatus of claim 9 wherein said first portion of said 
logic section and said second portion of said logic section are 
physically separated to prevent the an ion fi-om causing SEU in both 
portions. 

15. The apparatus of claim 9 wherein said output section 
comprises circuitry that is immune to SEU at ion energy levels of up 
to and including 80 MeVcm^/mg. 

16. The apparatus of claim 9 wherein said one or more logic 
section output signals are immune to SEU at ion energy levels of up 
to and including 80 MeVcmVmg. 

17. The apparatus of claim 9 wherein said input section, said logic 
section, and said output section are on the same integrated circuit. 

18. The apparatus of claim 9 wherein said input section comprises, 
for each of the N input signals, a pair of identical buffer stages that 
produce said pair of buffered signals. 
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19. The apparatus of claim 9 wherein for each of said pair of 
buffer stages, one of said pair of buffer stages is physically separated 
from the other of said pair of buffer stages to prevent an ion from 
causing SEU in both buffer stages. 

20. The apparatus of claim 9 wherein said combination in analog 
fashion of said first portion output signals and said second portion 
output signals comprises a direct electrical connection having a 
resistance of about less than 1 ohm. 

21. The method for combining first and second logic signals, each 
having both active pull and active pull down, to produce an output 
logic signal comprising the step of; 

summing the first and second logic signals in analog fashion to 
5 produce an output logic signal. 
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CIRCUIT LOGIQUE PROTEGE CONTRE DES PERTURBATIONS TRANSITOIRES 

La presente invention conceme des circuits numeriques 
insensibilises a des perturbations extemes, notamment des per- 
turbations localisees provenant en particulier de bombardements 
d'ions lourds. 

5 Une telle perturbation est susceptible de basculer in- 

tenpestivement I'etat d'un point memoire, et des structures 
particulieres de point tnemoire doivent etre adoptees pour pallier 
cet inconvenient . 

Avec les technologies passees de fabrication de cir- 

10 cuits integres, un point memoire etait susceptible de basculer 
seulement si la perturbation affectait directement ce point 
memoire. II fallait, par exenple, qu'un ion lourd atteigne I'un 
des transistors constituant le point memoire. Des perturbations 
survenant hors des points memoire, c'est-a-dire dans des circuits 

15 logiques combinatoires ; avaient une tres faible probabilite de 
modifier les etats de points memoire. En effet, ces perturbations 
se traduisaient par des inpulsions tres breves qui etaient 
filtrees pratiquement immediatement par les capacites elevees des 
conducteurs. Meme si une telle perturbation provoquait une 

2 0 inpulsion parasite atteignant 1' entree d'une cellule memoire, 
cette inpulsion avait une faible probabilite de modifier I'etat 
de la cellule memoire . 
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Avec les technologies recentes, les capacites. des 
conducteurs deviennent de plus en plus faibles et les circuits, 
notannment les cellules memoire, reagissent de plus en plus rapi- 
dement, a tel point que des inpulsions parasites provoquees par 
des perturbations sont de duree suffisante pour modifier I'etat 
des cellules memoire si elles surviennent au voisinage d*un front 
d'une horloge qui cadence les cellules memoire. 

Ainsi, si on veut insensibiliser un circuit numerique 
de technologie recente a des perturbations localisees, il ne 
suf f it pas d ' insensibiliser les points memoire, mais il f aut 
eviter que des iitpulsions parasites qu' elles pourraient generer 
hors des points memoire n'atteignent les points memoire. 

L.a generation d ' une impulsion parasite par un circuit 
logique combinatoire peut etre consideree comme une erreur que 
l»on pourrait corriger par une solution classique. 

La figure 1 illustre une solution classique que I'on 
pourrait employer pour corriger les erreurs produites par un 
circuit logique combinatoire. II s'agit d*un systeme correcteur 
d» erreurs a redondance triple, Un meme circuit logique combi- 
natoire 10 est duplique deux fois, respectivement en 11 et en 12. 
Les sorties des circuits 10 a 12 sont foumies a un circuit de 
vote majoritaire 14 qui selectionne pour sa sortie la valeur qui 
est foumie par au moins deux des circuits redondants 10 a 12. La 
sortie du circuit de vote majoritaire 14 est done exempt d' erreur 
en cas de def alliance d'au plus un des circuits redondants 10 a 
12, meme si cette def alliance est permanente. 

Bien entendu, cette solution triple la surface silicium 
du circuit integre. 

II existe d'autres solutions qui consistent a generer 
des codes correcteurs d' erreur pour les sorties d'un circuit. Si 
I'on veut pouvoir corriger toutes les sorties d'un circuit, cette 
solution est equivalente, en termes d' occupation de surface, a la 
redondance triple de la figure 1. 

Un objet de la presente invention est de prevoir une 
solution pour eliminer en sortie d'un circuit logique combi- 
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natoire toute inpulsion parasite provcquee par une perturbation 
localisee, ceci en occupant une surface silicium relativement 
f aible . 

Pour atteindre cet objet, la presente invention prevoit 
5 un circuit protege contre des perturbations transitoires , 
coaprenant un circuit logique combinatoire ayant au moins une 
sortie ; un circuit de generation d'un code de controle d*erreurs 
pour ladite sortie ; et un element memoire dispose a ladite sor- 
tie, commande par le circuit de generation de code de controle 
10 pour etre transparent lorsque le code de controle est correct, et 
pour conserver son etat lorsque le code de controle est 
incorrect . 

Selon un mode de realisation de la presente invention, 
le circuit de generation de code de controle d'erreurs conprend 
15 un circuit de calcul d'un bit de parite pour ladite sortie et un 
circuit de verification de la parite de la sortie et du bit de 
parite . 

Selon un mode de realisation de la presente invention, 
le circuit de generation de code de controle d'erreurs conprend 
2 0 un circuit logique dupliqus, ledit element memoire etant prevu 
pour etre transparent lorsque les sorties du circuit logique et 
du circuit duplique sont identiques, et, pendant que lesdites 
sorties sont distinctes, conserver son etat. 

Selon un mode de realisation de la presente invention, 

2 5 le circuit de generation de code de controle d'erreurs conprend 

un element pour retarder ladite sortie d'xane duree predeterminee 
superieure a la duree maximale des erreurs transitoires, ledit 
element memoire etant prevu pour etre transparent lorsque les 
sorties du circuit logique et de 1 * element de retard sont 

3 0 identiques, et pour, pendant que lesdites sorties sont 

distinctes, conserver son etat, 

Selon un mode de realisation de la presente invention, 
ledit element memoire est realise a partir d'une porte logique 
foumissant ladite sortie du circuit logique, cette porte logique 
3 5 comprenant au moins deux premiers transistors commandes par un 
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signal du circuit logique et au moins deiox seconds transistors 
commandes par le signal correspondant du circuit duplique, chacun 
des seconds transistors etant connecte en serie avec I'un 
respectif des premiers transistors. 
5 La presente invention vise egalement un circuit protege 

contre des perturbations transitoires , connprenant un circuit 
logique combinatoire ayant au moins une sortie reliee a une 
premiere bascule de synchronisation cadencee par une horloge, une 
deuxieme bascule reliee a ladite sortie et cadencee par l^horloge 

10 retardee d'une duree predeterminee, et un circuit d' analyse des 
sorties des bascules. 

Selon un mode de realisation de la presente invention , 
le circuit d' analyse signale une erreur si les sorties des 
bascules sont differentes. 

15 Selon un mode de realisation de la presente invention, 

le circuit comprend une troisierae bascule reliee a ladite sortie 
et cadencee par I'horloge retardee du double de la duree 
predeterminee, le circuit d» analyse etant un circuit de vote 
maj oritaire. 

2 0 La presente invention vise en outre un circuit protege 

contre des perturbations transitoires conprenant un circuit 
logique combinatoire ayant au moins une sortie reliee a une 
premiere bascule de synchronisation cadencee par une horlcge, une 
deuxieme bascule cadencee par I'horloge et recevant ladite sortie 
25 retardee d*une duree predeterminee, et un circuit d* analyse des 
sorties des bascules . 

Selon un mode de realisation de la presente invention, 
le circuit d' analyse signale une erreur si les sorties des 
bascules sont differentes. 

3 0 Selon un mode de realisation de la presente invention, 

le circuit corrprend une troisieme bascule cadencee par I'horloge 
et recevant ladite sortie retardee du double de la duree 
predeterminee, le circuit d' analyse etant un circuit de vote 
maj oritaire. 
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La presente invention vise par ailleurs un circuit 
protege contre des perturbations ,transitoires, connprenant trois 
circuits logiques identiques. Chacun des circuits logiques est 
precede d'un element memoire a deux entrees recevant respect i- 
5 vement les sorties des deux autres circuits logiques, chaque 
element memoire etant prevu pour etre transparent lorsque ses 
deux entrees sont identiques, et pour conserver son etat lorsque 
les deLix entrees sont dif f erentes . 

Selon un mode de realisation de la presente invention, 
10 les circuits logiques sont des inverseurs et les elements memoire 
conprennent, en serie, deux transistors MOS a canal P et deux 
transistors MOS a canal N, une premiere des entrees de 1 ' element 
memoire etant reliee aux grilles d'un premier des transistors MOS 
a canal P et d'un premier des transistors MOS a canal et la 
15 deuxieme entree de 1' element memoire etant reliee aux grilles des 
deux autres transistors. 

Ces objets, caracteristiques et avantages, ainsi que 
d' autres de la presente invention seront exposes en detail dans 
la description suivante de modes de realisation particuliers 

2 0 faite a titre non-limitatif en relation avec les figures jointes 

parmi lesquelles : 

la figure 1, precedemment decrite, illustre une solu- 
tion classique de correction d*erreurs produites par un circuit 
defaillant ; 

25 la figure 2A represente schematiquement un premier mode 

de realisation de circuit selon 1' invention permettant de suppri- 
mer des impulsions parasites generees par des perturbations 
localisees dans un circuit logique combinatoire ; 

la figure 2B represente un chronogramme illustrant le 

3 0 f onctionnement du circuit de la figure 2A ; 

les figures 3A et 3B representent deux exemples d' ele- 
ments a conservation d'etat utilises dans le circuit de la figure 
2A ; 
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la figure 4 represente schematiquement un deuxieme mode 
de realisation de circuit selon 1' invention permettant de suppri- 
mer des inpulsions parasites ; 

la figure 5 represente un exerrple d' element a conser- 
vation d'etat utilise dans le circuit de la figure 4 ; 

les figures 6A, 6B et 6C representent d'autres exenples 
d' elements a conservation d'etat du type utilise dans le circuit 
de la figure 4 ; 

la figure 7A represente schematiquement un troisieme 
mode de realisation de circuit selon 1' invention permettant de 
supprimer des impulsions parasites ; 

la figure 7B represente un chronogramme illustrant le 
fonctionnement du circuit de la figure 7A ; 

la figure 8A represente une variante du mode de reali- 
sation de la figure 7 A ; 

la figure 8B represente un chronogramme illustrant le 
fonctionnement du circuit de la figure 8A ; 

la figure 9A represente un quatrieme mode de reali- 
sation de circuit selon 1' invention permettant de supprimer des 
inpulsions parasites / 

la figure 9B represente un chronogramme illustrant le 
fonctionnement du circuit de la figure 9A ; 

la figure lOA represente schematiquement un cinquieme 
mode de realisation de circuit selon 1 ' invention permettant de 
supprimer des inpulsions parasites ; 

la figure lOB represente un chronogramme illustrant le 
fonctionnement du circuit de la figure lOA ; 

la figure 11 represente une application du mode de 
realisation de la figure 4 a une boucle asynchrone ; 

la figure 12 represente une amelioration de la 
structure de la figure 11 ; 

la figure 13 represente une sinplif ication de la 
structure de la figure 12 ; 

la figure 14 represente une application du principe de 
la figure 13 a une cellule memoire statique ; et 
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la figure 15 represente un circuit de vote majoritaire 
realise a partir de la structure de la figure 14 . 

On propose, selon 1* invention, plusieurs solutions per- 
mettant de supprimer des inpulsions parasites generees par un 
5 circuit logique combinatoire a la suite d'une perturbation loca- 
lisee, par exennple due a un bombardement d'ion lourd. Toutes ces 
solutions, pour arriver a des structures particulierement • sim- 
ples, e>ploitent le fait que les inpulsions parasites constituent 
des erreurs transitoires et non permanentes . Les modes de reali- 
10 sation de 1 ' invention evitent ainsi 1 'utilisation de solutions 
classiques, a redondance triple ou a codes correcteurs d' erreurs 
multiples, destinees a corriger une def alliance permanente d'un 
circuit . 

La figure 2A represente schematiquement un premier mode 
15 de realisation de 1' invention exploitant cette caracteristique. 
Un circuit logique combinatoire 10 est associe a un circuit de 
verification 20 qui foumit un code de controle d'erreur P pour 
la sortie A du circuit logique 10. Le circuit 20 est par exetrple 
un circuit qui calcule de maniere classique un bit de parite P 
2 0 pour la sortie A du circuit logique 10, cette sortie A pouvant 
bien sur etre multiple. En 22, le bit de parite P est combine par 
OU-Exclusif avec la sortie A du circuit logique 10, ce qui 
foumit un signal d'erreur E qui est actif lorsque la parite est 
mauvaise, c'est-a-dire lorsque la sortie A ou le bit de parite P 

2 5 cortporte une erreur. 

Le signal d'erreur E et la sortie A sont foumis a un 
element que I'on dira "a conservation d'etat" 24. II s'agit en 
fait d'un element memoire semblable a une bascule a transparence 
commandee, c'est-a-dire ayant un premier mode, selectionne lors- 

3 0 que le signal d'erreur E est inactif, ou la sortie A est 

transmise telle quelle a la sortie S de 1' element 24, Dans un 
deuxieme mode, selectionne lorsque le signal d'erreur E est 
actif, 1' element 24 conser^/e I'etat de la sortie A, tel qu'il 
etait avant 1* activation du signal d'erreur E. 



wo 00/54410 



PCT/FROO/00573 



8 

Une bascule 26, prevue classiquement pour verrouiller 
la sortie du circuit logique 10, regoit la sortie S de 1' element 
a conservation d'etat 24 au lieu de recevoir directement la 
sortie A du circuit 10. Cette bascule 26 est cadencee par une 
horloge CK destinee a rendre la sortie du circuit 10 synchrone 
aux sorties d'autres circuits. La bascule 26 est un registre dans 
le cas ou la sortie A est multiple. Cette bascule ou ce registre 
sont, de preference, de structure insensible aux perturbations 
localisees . 

La figure 2B represente un chronogramme il lust rant le 
fonctionnement du circuit de la figure 2A. A un instant to, 
lorsque survient un premier front actif de 1' horloge CK, la 
sortie A du circuit logique 10 est a un etat quelconque X. Le 
signal d'erreur E, etant inactif, 1' element 24 est en mode 
"transparent" et transmet I'etat X sur sa sortie S. Get etat X 
est verrouille dans la bascule 26. La sortie de la bascule 26, 
etant eventuellement realimentee au circuit logique 10, ce 
circuit logique genere une nouvelle sortie A apres un delai te 
correspondant au tenps de propagation dans le "chemin critique" 
du circuit 10 . 

A un instant ti, la sortie A du circuit 10 change 
d*etat, par exemple, passe a 0. II en est de meme pour la sortie 
S de 1' element 24 qui est tou jours mis en mode "transparent" par 
le signal E. 

A un instant ts debute une irrpulsion parasite sur la 
sortie A, qui se termine a un instant tj . La figure 2B illustre un 
cas defavorable ou 1' impulsion parasite sur le signal A risque 
d'entrainer une modification intenpestive de I'etat de la bascule 
26. Dans cet exemple, la fin de 1' irrpulsion parasite coincide 
avec le front actif suivant de 1' horloge CK, lequel front provo- 
que la memorisation dans la bascule 26 de I'etat de la sortie S 
precedant immediatement 1' instant t3. Or, le signal d'erreur E 
devient actif pendant la duree tp de 1' irrpulsion parasite, rendant 
1' element 24 "opaque" a 1' evolution du signal A entre les 
instants t,^ et t3. En consequence, le signal S ne change pas 
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d'etat pendant I'inpulsion parasite et la bascule 26 memorise une 
valeur correcte. 



a ete presente suf f isamment longtemps avant le front actif d'hor- 
5 lege correspondant , pendant une duree dite d ' initialisation. En 
fait, un risque de memorisation de valeur erronee par la bascule 
26 se presente dans une plage de variation de la position de 
1* impulsion parasite, cette plage allant d'une position ou la fin 
de I'inpulsion precede le front actif de I'horloge CK de la duree 
10 d' initialisation, a une position ou le debut de 1' impulsion 
survient au moment du front actif de I'horloge CK. 



d'etat 24 est egalement une cellule de memorisation, I'etat qu'il 
doit memoriser doit avoir ete presente au moins pendant un temps 

15 d ' initialisation avant 1 ' ordre de memorisation ( 1 ' activation du 
signal E) , Ainsi, il est necessaire que la duree separant les 
instants t^ et ts soit superieure a ce tenps d' initialisation. En 
outre, on doit egalement garantir qu'un tenps d' initialisation 
cortplet de 1' element 24 se soit ecoule avant ou apres I'inpulsion 

2 0 parasite entre les instants t^ et ts, ceci pour etre sur que 
1' element 24 prend en conpte le niveau hors de I'inpulsion. 



de la periode de I'horloge CK, egale a t^ + 2th24 + + t^^e^ ou t^ 
est le tenps de propagation dans le chemin critique du circuit 

2 5 logique 10, th24 le tenps d' initialisation de 1' element 24, tp la 

duree maximale d'une impulsion parasite, et tj^^ le tenps d* ini- 
tialisation de la bascule 26. Dans certains caS; notamment si 
1' element 24 a un effet de memorisation capacitif, cette periode 
peut etre reduite de t^aA - 

3 0 Cette solution requiert done, par rapport a un circuit 

logique nonrial, une augmentation de la periode d'horloge. En 
effet, dans un circuit normal; la periode d'horloge doit etre 
superieure seulement a t^ + ^^26- centre, grace a cette 

redondance tenporelle, le circuit off re le meme niveau de secu- 



Une bascule ne change d'etat que si le nouvel etat lui 



Par ailleurs, etant donne que 1' element de conservation 



Ces contraintes inposent le choix d'une duree minimale 



wo 00/54410 



PCT/FROO/00573 



rite gu'un circuit classique a redondance triple (figure 1) avec 
un cout materiel sensiblement inferieur. 

Un element de conservation d'etat 24 sera en regie ge- 
nerale realise a partir de portes logiques foumissant les 
sorties du circuit logique combinatoire 10 a des bascules 26. 

Les figures 3A et 3B representent deux exenples d' ele- 
ments a conservation d'etat realisant une fonction NON-ET a deux 
entrees. Les deux entrees a et b sont foumies a une porte ET 30 
dont la sortie est connectee a une premiere entree d * une porte 
NON-OU 32 . Une porte OU-Exclusif 22 ' , equivalente a la porte OU- 
Exclusif 22 de la figure 2A, rec?oit les entrees a et b, ainsi que 
le bit de parite P. La sortie E de la porte 22' est foumie a une 
deuxieme entree de la porte NON-OU 32 et a ime premiere entree 
d'une porte ET 34. Les sorties des portes 32 et 34 sont foumies 
a une porte OU 36 qui foumit la sortie S de 1' element a conser- 
vation d ' etat , laquelle sortie est rebouclee sur une deuxieme 
entree de la porte ET 34. 

Lorsqu'il n*y a pas d'erreur de parite, le signal E est 
a zero, Alors, la sortie de la porte ET 30 est inversee par la 
porte NON OU 32 et transmise sur la sortie S par la porte OU 36, 

En cas d'erreur de parite, le signal E est a 1, provo- 
quant une memorisation de I'etat de la sortie S dans un point 
memoire constitue des portes 34 et 36. 

Le circuit de la figure 3A necessite quatre portes pour 
realiser la fonction d'une seule porte. 

La figure 3B represente une solution moins couteuse en 
materiel pour realiser un element a conservation d'etat realisant 
une fonction NON-ET. Les signaux d' entree a et b sont foumis au>: 
deux entrees d'une porte NON-ET 38 dont la sortie est reliee a un 
condensateur C par 1 ' intermediaire d ' un interrupteur K . L ' inter- 
rupteur K est commande par le signal d'erreur E foumi par la 
porte OU-Exclusif 22' . 

Lorsque le signal d • erreur E est inactif , 1 ' inter- 
rupteur K est ferme et le condensateur C se charge au niveau 
foumi par la porte 38. Lorsque le signal d'erreur E est active ; 
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1 ' interrupteur K est ouvert, mais I'etat de la sortie S de 1' ele- 
ment est conserve par le condensateur C pendant la duree de 
1 ' inpulsion parasite . On remarquera que le condensateur C peut 
etre constitue par la sinple capacite de la ligne de sortie S. 
5 Des elements de conservation d'etat realisant d'autres 

fonctions logiques pourront etre realises par I'homme du metier. 
Par exerrple, pour realiser la fonction identite en utilisant la 
solution de la figure 3B, le signal d' entree, unique, est direc- 
tement f oumi a 1 ' interrupteur K . 

10 Le mode de realisation de la figure 2A presente 1 ' in- 

convenient, notamment si le nombre de sorties A du circuit 
logique 10 est inportant; que la porte OU-Exclusif 22, a plu- 
sieurs entrees, reagit avec un retard iitportant pour activer le 
signal d'erreur E. II en resulte qu'une partie du debut de I'im- 

15 pulsion parasite est transmise sur la sortie S. Toutefois, dans 
la plupart des cas, la duree de cette partie d' impulsion sera 
inferieure au temps d* initialisation de la bascule 26 et n'affec- 
tera done pas son etat. 

La figure 4 represente un mode de realisation permet- 

2 0 tant d'eviter cet inconvenient. 

Le circuit logique connbinatoire 10 est duplique une 
f ois en 11 . La sortie A du circuit 10 et la sortie dupliquee A* 
du circuit 11 sont foumies a un element de conservation d'etat 
24 » qui transmet sur sa sortie S I'etat de son entree A ou A* 
25 lorsque les entrees A et A* sont identiques et qui conserve son 
etat lorsque les entrees A et A* deviennent differentes. 

Le fonctionnement de ce circuit est similaire a celui 
de la figure 2A en considerant qu'une condition ou les entrees A 
et A* sont differentes correspond a 1' activation du signal d'er- 

3 0 reur E a la figure 2B. 

La figure 5 represente un element a conservation d ' etat 
24 ' du circuit de la figure 4 realisant une fonction ET a deu:-^: 
entrees. Les entrees a et b sont foumies a une porte ET 50 dont 
la sortie est foumie a une premiere entree d'une porte ET 52 et 
3 5 a une premiere entree d'une porte OU 54. Les entrees dupliquees 
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a* et sont foumies a une porte ET 56 dont la sortie est 

connectee a la deuxieme entree de la porte 52 et a la deuxieme 
entree de la porte 54. Les sorties des portes 52 et 54 sont 
connectees respectivement a des portes 36 et 34 similaires aux 
poirtes 36 et 34 de la figure 3A. 

On remarguera que les portes 34, 36, 52, et 54 
constituent un element a conservation d'etat ayant la fonction 
logique "identite". Pour creer une fonction logique quelcongue, 
il suffit de relier deux portes, realisant chacune cette fonction 
de imaniere classique, aux portes 52 et 54. 

Selon vxi autre mode de realisation, on realise les 
elements a conservation d'etat a partir de la structure interne 
de portes logiques classiques . On prevoit pour cela deux 
transistors connectes en serie pour chaque transistor requis 
normalement dans la porte classique. Les deux transistors sont 
commandes pour etre ouverts en meme terrps, de sorte que, si I'un 
d*eux se ferme du fait d'une perturbation, le deuxieme, restant 
ouvert, empeche toute circulation de courant intenpestive . Une 
telle configuration se prete particulierement bien a une 
structure du type de la figure 4 comprenant deux circuits 
logiques redondants. En effet, les deux transistors de 
1 ' association serie sont alors commandes respectivement par un 
signal et son signal duplique. 

La figure 6A represente un element a conservation 
d'etat selon ce principe ayant une fonction d'inverseur. La 
sortie S du circuit est reliee a un potentiel haut par I'inter- 
mediaire de deux transistors MOS a canal P en serie MPl et MP2 . 
La sortie S est egalement reliee a un potentiel bas par deux 
transistors MOS a canal N en serie MNl et . Un premier des 
deux transistors MOS a canal P et un premier des deux transistors 
MOS a canal N sont commandes par un signal normal a tandis que 
les transistors restants sont commandes par le signal duplique 
a* . 

Si les signaiix a et a* sont egaux, correspondant a un 
fonctionnement normal, les deux transistors MP ou les deux tran- 




• 
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sistors MN sont conducteurs et forcent la sortie S vers le 
potentiel correspondant pour renplir la fonction d*inverseur. 



transistors MP et au moins un des transistors MN est bloque^ d'ou 
5 il resulte que la sortie S est flottante et conserve son niveau 
precedent par ef f et capacitif . 

La figure 6B represente un element a conservation 
d'etat realisant une fonction NON-OU, Sa sortie S est reliee a un 
potentiel haut par 1 * intermediaire de quatre transistors MOS a 

10 canal P en serie, commandes respectivement par les signaux d' en- 
tree normaux a et Jb et leurs signaux dupliques a* et b* . La 
sortie S est egalement reliee a un potentiel bas par 1 ' inter- 
Ttiediaire de deux associations serie de transistors MOS a canal N, 
I'une corrportant deux transistors conmandes respectivement par 

15 les signaux a et a*, 1' autre conportant deux transistors comman- 
des respectivement par les signaiox i? et b* . 

La figure GC represente un element de conservation 
d*etat realisant une fonction NON-ET. La sortie S est reliee au 
potentiel bas par 1 • intermediaire de quatre transistors MOS a 

2 0 canal N en serie commandes respectivement par les signaux a et jb 
et leurs signaux dupliques a* et b* . La sortie S est egalement 
reliee au potentiel haut par 1 ' intermediaire de deux associations 
serie de transistors MOS a canal P, la premiere cooprenant deux 
transistors commandes respectivement par les signaux a et a*, et 

2 5 la deuxieme cortprenant deux transistors commandes respectivement 

par les signaux jb et b* . 

Les elements des figures 6B et 6C fonctionnent selon le 
principe decrit en relation avec la figure 6A. Plus generalement , 
ce principe de mise en serie de transistors dupliques s' applique 

3 0 a toute porte logique . 

Le circuit de la figure 6A peut etre utilise en tant 
que cellule memoire dynamique insensible aux perturbations . Pour 
cela, I'etat de la cellule est stocke de maniere redondante sur 
les deux entrees a et a* par effet capacitif. Si I'une des 
3 5 entrees est perturbee, la sortie S conseirve son etat precedent 



Si les signaux a et a* sont differents, au moins un des 
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par effet capacitif, jusqu'au raf raichissement de la cellule 
retablissant I'etat correct de 1' entree perturbee. Ce principe 
s' applique aussi a tout element de conservation d'etat (figures 
3A, 3B, 5, GB, 6C) . Pour cela, il suffit d»utiliser un element de 
5 memorisation (capacite, memoire statique) sur les entrees de 
1* element a conservation d'etat, et de verrouiller les valeurs 
foumies par la sortie A du circuit 10 et par la sortie du 
circuit de verification d*erreur (20, 11) . 

On pourra egalement utiliser d'autres elements a 

10 conservation d'etat, tels qu'un element de memorisation 
specifique decrit dans "Upset Hardened Memory Design for 
Submicron CMOS Technology", 33"^ International Nuclear and Space 
Radiation Effects Conference, Juillet 1996, Indian Wells, 
Calif omie, Calin, M. Nicolaidis, R. Velazco, 

15 La figure 7A represente un troisieme mode de realisa- 

tion de circuit combinatoire selon 1 * invention insensible a des 
perturbations localisees. II connprend un seul circuit logique 
combinatoire 10. La suppression des inpulsions parasites est 
obtenue exclusivement grace a une redondance temporelle, contrai- 

2 0 rement a-ux modes de realisation precedents ccmbinant les 
redondances temporelle et materielle. La sortie A du circuit 10 
est foumie a trois bascules 70, 71 et 72 cadencees 
respectivement par I'horloge CK, I'horloge CK retardee d*une 
duree 5 et l»horloge CK retardee d'une duree 25. Les sorties SI, 

2 5 S2 et S3 de ces bascules sont foumies a un circuit de vote 

majoritaire 74 qui foumit la sortie S corrigee. 

La figure 7B represente un chronogramme illustrant le 
f onctionnement du circuit de la figure 7A. Ce chronogramme repre- 
sente, sous forme de barres verticales, les fronts actifs des 

3 0 signaux d'horloge CK, CK+5 et CK+25. On suppose que le signal A 

presente une inpulsion parasite a cheval sur le premier front de 
I'horloge CK, survenant a un instant to- La bascule 70, activee a 
1 ' instant to. stocke de maniere erronee 1 ' etat de 1 ' impulsion 
parasite . 
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A un instant t2 le signal A passe a 1 de maniere 
normale. Cette transition survient un intervalle de temps t^ apres 
un instant tl ou est survenu le dernier front de I'horloge CK+25. 
Le tenps t^ est le tenps de propagation a travers le circuit de 
5 vote 74 et le circuit logique 10 . 

A des instants t3; t4 et t^, l»etat 1 du signal A est 
echantillonne par les fronts respectifs suivants des horloges CK, 
CK+5 et CK+25. Le signal Si reste a 1 tandis que les signaux S2 et 
S3 passent a 1, respect ivement aux instants t3, t4 et ts. 
10 Un intervalle de terrps t^ apres 1* instant ts, le signal 

A passe a 0. II en resulte qu'aux fronts suivants des horloges 
CK, CK+5 et CK+25, les signaux SI, S2, et S3 passent 
success ivement a 0 . 

La sortie S du circuit de vote 74 est a 1 lorsqu'au 
15 moins deux des signaux SI, S2 et S3 sont a 1. C'est le cas qui se 
produit a paxtir de 1» instant t^, pendant que le signal S2 est a 
1. 

On remarque que le circuit de la figure 7A ne passe pas 
a 1 a 1' instant to ou survient l^itrpulsion parasite, mais passe 

2 0 correctement a 1 a 1' instant t4 en reponse a un passage normal a 1 

du signal A. 

Pour que ce mode de realisation fonctionne correc- 
tement, I'irrpulsion parasite doit etre echantillonnee par une 
seule des horloges CK, CK+5 et CK+25 . La duree maximale tp des 
25 inpulsions parasites peut pour cela atteindre la valeur 5 - th/ ou 
th est le tenps d • initialisation des bascules 70 a 72 . Ainsi, on 
choisit 5 = tp + th- Par ailleurs, la periode des horloges doit 
etre choisie au moins egale a t^ + 25 + t^, iequel tenps 
correspond au tenps de propagation maximal des entrees du circuit 

3 0 10 vers la sortie S. 

La figure 8A represente une variante du mode de reali- 
sation de la figure 7A. Dans cette figure, des memes elements 
qu'a la figure 7A sont designes par des memes references. Au lieu 
de cadencer les bascules 70 a 72 par des horloges retardees les 
3 5 unes par rapport aux .autres, ces bascules sont cadencees par la 
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meme horloge CK. Par centre, le signal A est foumi a deux lignes 
a retard en cascade 80 et 81 intrcduisant chacune un retard 5. Le 
signal A est directement foumi a la bascule 70, la sortie A2 de 
la ligne a retard 80 est foumie a la bascule 71 et la sortie A3 
5 de la ligne a retard 81 est foumie a la bascule 72. 

La figure 8B represente un chronogramme illustrant le 
fonctionnement du circuit de la figure 8A, A un instant to sur- 
vient le premier front de 1' horloge CK. On suppose que le signal 
A presente une irtpulsion parasite a cheval sur ce front. II en 

10 resulte que le signal SI passe a un a cet instant to. Les signaux 
A2 et A3 presentent la meme inpulsion parasite mais decalee 
respectivement de 5 et de 25 par rapport a 1' instant to. 

Le retard 5 est choisi superieur a la duree tp + t^/ ou 
tp est la duree maximale d'une impulsion parasite et t^ le tenps 

15 d' initialisation des bascules 70 a 72 . On assure ainsi, dans 
I'exemple de la figure SB, que 1» irtpulsion parasite du signal A2 
ne soit pas echantillonnee a 1' instant to. Il en resulte que la 
valeur du signal S2, et a fortiori du signal S3, reste correcte 
(ici egale a 0) . 

2 0 A 1* instant t^, survient le front suivant de 1' horloge 

CK. Les signaux A a A3 sont echantillonnes alors qu'ils sont a 0, 
II en resulte que le signal SI passe a 0 et que les signaux S2 et 
S3 restent a 0 . 

A un instant t^, entre 1 ' instant t^ et le front suivant 

2 5 de 1' horloge CK survenant a un instant t3, le signal A passe a 1 

de maniere normale pendant une periode d' horloge. La duree sepa- 
rant les instants ti et ts correspond au tenps t^ de propagation 
dans le chemin critique du circuit 10 et dans le circuit de vote 
74. Dans I'exetrple represente, le retard t^ est tel que le front 

3 0 montant correspondant des signaux A2 et A3 survienne encore avant 

1 ' instant t3 . 

Ainsi, a 1 ' instant tj, les signaux A, A2 et A3 sont 
echantillonnes alors qu'ils sont a 1. Les signaux SI, S2 et S3 
passent a l. Les signaux SI, S2 et S3 restent a 1 jusqu'au front 
3 5 suivant du signal d' horloge survenant a un instant t4 . A cet 
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instant t4, les signaux A, A2 et A3 sont passes a 0. II en resulte 
que les signaux SI, S2 et S3 passent a 0. 

Le signal S presente une allure correcte en restant a 0 
entre les instants to et t^ et en passant a 1 entre les instants 
5 t3 et t4, pendant que les signaux SI, S2 et S3 sont tous trois a 
1. 

Le f onctionnement correct illustre a la figure 8B est 
obtenu pourvu que la valeur minitnale de la periode d'horloge soit 
egale a t^ + 25 + t^. 

10 La figure 9A represente schematiquement un quatrieme 

mode de realisation de circuit selon 1 ' invention permettant de 
supprimer des inpulsions parasites . On utilise ici un element de 
conservation d'etat 24' du type de celui de la figure 4, prevu 
pour fonctionner avec des signaux dupliques. Get element revolt 

15 la sortie A du circuit logique 10 et cette meme sortie est retar- 
dee par une ligne a retard 90 introduisant un retard 5. Le signal 
foumi par cette ligne a retard 90 const itue le signal duplique 
A*. La sortie S de 1' element 24* est foumie a une bascule 26. 

La figure 9B represente un chronogramme illustrant le 

2 0 f onctionnement du circuit de la figure 9A, Comme dans les exem- 
ples precedents, le signal A presente une inpulsion parasite a 
cheval sur un premier front de I'horloge CK survenant a un ins- 
tant to, 

A un instant ti, avant le front montant suivant de 

2 5 I'horloge CK survenant a un instant t3, le signal A passe a 1. Les 

instants to et t^ sont distants du tenps de propagation t^ dans le 
chemin critique du circuit 10 . 

A un instant ts, survenant egalement avant 1 ' instant tj, 
le signal retarde A* passe a 1 . 

3 0 Les signaux A et A^ restent a 1 pendant une periode 

d'horloge et passent a 0 a des instants respectifs t4 et avant 
le front d'horloge suivant survenant a 1 • instant t^ . 

Le signal S foumi par le circuit a conservation d'etat 
24' ne change d'etat qu'au moment ou les signaux A et A* devien- 
35 nent egaux. Ceci se produit seulement a 1 ' instant t2 ou le signal 
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A* passe a 1 alors que le signal A est deja a 1, et a 1 ' instant ts 
ou le signal A* passe a 0 alors que le signal A est deja a 0 (le 
tennps de propagation de 1' element 24' est ici neglige pour des 
raisons de clarte) . 
5 Ainsi, le signal S est a 1 entre les instants ts et t^. 

Get etat 1 est echantillonne par la bascule 26 a 1* instant t3; et 
correspond a I'etat qu'il faut ef f ectivement echantillonner dans 
le signal A, 

Le fonctionnement du circuit est correct si la periode 
10 d'horloge est au moins egale a t^ + 5 + 21^24. + tp + t^/ ou t24. est 
le tenps de propagation dans 1» element 24' et tj, le teirps 
d* initialisation de la bascule 26. La valeur 5 doit etre choisie 
superieure a tp - t24 r , 

La figure lOA represente schematiquement un cinquieme 
15 mode de realisation de circuit selon 1* invention, permettant de 
detecter de maniere sinple une erreur liee a una irrpulsion para- 
site. La sortie A du circuit logique 10 est foumie a deux 
bascules 92 et 93, l*une cadencee par I'horloge CK et 1* autre par 
I'horloge retardee d'une duree 5. A titre de variante, la bascule 
2 0 92 peut etre commandee par un front ou un niveau d'un premier 
type (montant ou descendant - haut ou bas) d'une horloge CK, 
tandis que la bascule 93 est commandee par un front ou un niveau 
de type oppose de la meme horloge (front descendant ou montant - 
bas ou haut) . Les sorties SI et S2 de ces bascules sont foumies 

2 5 a un conrparateur 95 dont la sortie est foumie a une bascule 97. 

La bascule 97 est cadencee par une horloge CK+5-He, legerement 
retardee par rapport au signal CK+d. La bascule 93 est utilisee 
ici pour synchroniser le signal A, et sa sortie S2 est 
eventuellement rebouclee sur les entrees du circuit logique 10. 

3 0 La figure lOB represente un chronogramme illustrant le 

fonctionnement du circuit de la figure lOA. Comme dans I'exenple 
precedent , une inpul s ion paras ite survient dans le s ignal A a 
cheval sur un front du signal CK survenant a un instant to- 11 en 
resulte que le signal Si passe a 1. Par centre, la bascule 93 
3 5 n' echantillonne pas encore le signal A et sa sortie S2 reste 
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inchangee (a 0). Le comparateur 95 n'indique pas encore une 
inegalite des signaux SI et S2, et le signal ERR indigue une 
absence d ' erreur par un etat 0 . 

A un instant ti, survient le front suivant de I'horloge 
5 CK-h5, apres I'inpulsion parasite dans le signal A. Le signal S2 
reste inchange. 

A un instant ts^ une duree £ apres le premier front du 
signal CK+5, survient le front suivant de I'horloge CK+5+c, lequel 
front provoque 1 ' echantillonnage de la sortie du cocrparateur par 
10 la bascule 97. Les signaux Si et S2 etant differents, le signal 
d' erreur ERR est active 

A un instant t3, un intervalle tc apres 1* instant t^, le 
signal A passe a 1 de nianiere normale. Get etat 1 est 
echantillonne par I'horloge CK a un instant t4 . Le signal SI reste 
15 a 1. 

A un instant ts survient le front suivant de 1 ' horloge 
CK-f5, qui echantillonne le signal A alors que celui-ci est encore 
a 1. Le signal S2 passe a 1. Le signal A passera a 0 apres 
1* intervalle de propagation tc- 

2 0 A un instant tg survient le front suivant de 1 ' horloge 

CK+5-h8, qui echantillonne la sortie du contparateur 95 . Les signaux 
SI et S2 etant au meme etat, le signal d' erreur ERR est 
desactive. 

A un instant t^ survient le front suivant de 1 ' horloge 
25 CK, qui echantillonne le signal A alors que celui-ci est a 0 . Le 
signal Si passe a 0. 

A un instant tg survient le front suivant de I'horloge 
CK+5 qui echantillonne le signal A alors que celui-ci est a 0. II 
en resulte que le signal S2 passe a 0 . 

3 0 La periode de I'horloge doit etre choisie au moins 

egale a t^ + t^ + 5, la duree 5 etant au moins egale a la duree t,. 

Selon une variante, non representee, du circuit de la 
figure lOA, c'est la sortie SI qui est exploitee . Alors, on doit 
3 5 veiller a ce qu'une transition de la soirtie SI ne soit pas 
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propagee vers la soirtie A avant le front suivant de l*horloge 
CK+S. En d'autres termes, il faut que le teirps de propagation t^ 
soit superieur a 5. Dans ce cas, la periode d'horloge sera egale 
a te + th, c'est-a-dire egale a la periode d^horloge du circuit 
classique sans protection contre les erreurs transitoires . 

Le signal d'erreur foumi par le circuit de la figure 
lOA peut etre exploite de diverses manieres pour corriger I'er- 
reur detectee . On peut envisager, par exenple, que ce signal 
d'erreur declenche une reprise d' operation, par exeirple la 
repetition d'une demiere "instruction" executee par le systeme. 

II peut egalement etre utilise pour corriger une erreur 
de synchronisation due a 1 'utilisation d*une horloge trop rapide. 
En cas d'erreur, on declenche une reprise et on reduit la 
frequence de 1' horloge pendant la reprise. Ceci est 
particulierement interessant dans le cas de la variante 
exploitant la sortie SI, dans laquelle le circuit fonctionne a la 
Vitesse du circuit classique. 

Selon une autre variante, non representee, du circuit 
de la figure IDA, les bascules 92 et 93 sont cadencees par la 
meme horloge CK et I'ime d'entre elles regoit le signal A retarde 
de la duree 5. 

De nombreux circuits numeriques forment des boucles 
asynchrones, c'est-a-dire que leurs sorties sont directement 
rebouclees sur leurs entrees, sans passer par une bascule de 
synchronisation. Les cellules memoire statiques en sont un 
exetrple. De tels circuits sont susceptibles de memoriser un etat 
et sont done sensibles aux perturbations risquant de basculer cet 
etat . 

La figure 11 represente une agencement selon 
1' invention pour proteger un tel circuit, utilisant le principe 
de duplication de la figure 4. La sortie d'un circuit logique 10 
et la sortie d'un circuit logique duplique 11 sont reliees 
respectivement aux deux entrees d' un premier element a 
conservation d'etat 24a et d'un deuxieme element a conservation 
d'etat 24b, tous deux du type de celui de la figure 4. La sortie 
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de 1' element 24a est rebouclee sur le circuit 10, tandis que la 
sortie de 1' element 24b est rebouclee sur le circuit 11. II est 
necessaire d'utiliser deux elements a conservation d'etat, car si 
on en utilisait un seul dent la sortie serait rebouclee sur les 
5 deux circuits 10 et 11, une perturbation dans 1' element serait 
transmise aux deux circuits dupliques, provoquant la meme erreur 
dans les deux circuits. Cette condition d' erreur ne serait pas 
corrigee . 

La structure de la figure 11 est toutefois sensible a 
10 une perturbation survenant sur la sortie de I'un des elements a 
conservation d'etat. Si le tertps de propagation dans le circuit 
10 ou 11 conceme est inferieur a la duree de la perturbation, la 
perturbation retardee arrive a 1' entree de 1' element a 
conservation d'etat avant meme que la perturbation n' ait disparu 
15 sur sa sortie. II en resulte que 1' element tend a conserver 
I'etat errone affecte par la perturbation. 

La figure 12 represente une structure evitant ce 
prcbleme. Le circuit 10 et son duplique 11 sont chacun scindes en 
deux parties, 10a et 10b pour le circuit 10, et 11a et lib pour 

2 0 le circuit 11. Entre les deux parties de chaque circuit, on 

insere un element a conservation d'etat supplementaire , 24c entre 
les parties 10a et 10b, et 24d entre les parties 11a et lib, les 
elements 24c et 24d etant connectes de la meme maniere que les 
elements 24a et 24b. 
25 La figure 13 represente une sinplif ication de la 

structure de la figure 12, rendue possible si les parties 10a, 
10b et leurs parties dupliquees ont la meme fonction logique et 
regoivent les memes entrees . Par rapport a la figure 12 , le 
circuit lib et 1' element 24d ont ete omis. Les elements a 

3 0 conservation d'etat 24a et 24b regoivent respectivement la sortie 

du circuit 11a et la sortie du circuit 10a a la place de la 
sortie du circuit lib de la figure 12 . 

La figure 14 represente une application du principe de 
la figure 13 pour realiser une cellule memoire statique. Les 
35 elements a conservation d'etat 24a, 24b et 24c sont des 
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inverseurs a conservation d'etat du type de la figure 6A. Les 
parties de circuit 10a, 11a et 10b sont des inverseurs 
classiques. Un inverseur a conservation d'etat suivi d'un 
inverseur classique ont une fonction identite. Ceci assure que 
les elements 24a, 24b et 24c regoivent des valeurs d ' entree 
identiques, ce qui est aussi valable pour les inverseurs lOa, 11a 
et 10b, 

La cellule memoire ainsi obtenue est insensible aiox 
perturbations aussi bien en f onctionnement statique qu'en 
f onctionnement dynamique. 

La figure 15 represente une variant e de la cellule de 
la figure 14. En serie avec chacun des couples de transistors MOS 
a canal P, on a insere un transistor MOS a canal P commande par 
un signal d'horloge CK. En serie avec chacun des couples de 
transistors MOS a canal N, on a insere un transistor MOS a canal 
N cormiande par le cocrplement du signal d'horloge CK. Ces 
transistors suppriment des appels de courant de corrmitation de la 
cellule . 

Par ailleurs, la figure 15 represente une application 
de la structure de la figure 14 a un circuit de vote utilisable 
dans les circuits des figures 7A et 8A. Pour cela, par rapport a 
la figure 14, on a omis les transistors d'acces. Les trois 
signaux d' entree SI, S2, S3 du circuit de vote sont appliques aux 
entrees des inverseurs . 

On obtient ainsi un circuit de vote qui sert a 
memoriser le result at du vote de inaniere insensible aux 
perturbations. Si on utilise ce circuit de vote dans les figures 
7A et 8A, les bascules 70 a 72 qui precedent le circuit de vote 
sont de sinples bascules a transparence commandee. 

On peut par ailleurs connecter une cellule memoire 
classique a chacune des entrees SI, S2 et S3, commandee par un 
signal d'horloge. On forme ainsi une bascule maitre-esclave . 

Dans la description qui precede, on a considere le cas 
ou on utilise des bascules sensibles a des transitions pour 
verrouiller les etats de sortie d'un circuit logique. La presente 
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invention s' applique egalement a des bascules sensibles a des 
etats (a transparence commandee) . 
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REVE[NDICA.TIONS 

1 . Circuit protege contre des perturbations 
transitoires, conprenant un circuit logique combinatoire (10) 
ayant au moins una sortie (A), caracterise en ce gu'il comprend : 

un circuit (20, 11) de generation d'un code de controle 
d'erreurs pour ladite sortie ; et 

un element memoire (24, 24') dispose a ladite sortie, 
commande par le circuit de generation de code de controle pour 
etre transparent lorsque le code de controle est correct, et pour 
conserver son etat lorsque le code de controle est incorrect. 

2 . Circuit protege selon la revendication 1 , carac- 
terise en ce que le circuit de generation de code de controle 
d'erreurs corrprend un circuit (20) de calcul d'un bit de parite 
(P) pour ladite sortie (A) et un circuit (22) de verification de 
la parite de la sortie et du bit de parite. 

3 . Circuit protege selon la revendication 1 , carac- 
terise en ce que le circuit de generation de code de controle 
d»erreurs cortprend un circuit logique duplique (11), ledit 
element memoire (24') etant prevu pour etre transparent lorsque 
les sorties du circuit logique (10) et du circuit duplique (11) 
sont identiques, et, pendant que lesdites sorties sont 
distinctes, conse2rver son etat. 

4. Circuit protege selon la revendication 1, carac- 
terise en ce que le circuit de generation de code de controle 
d'erreurs comprend un element (90) pour retarder ladite sortie 
d'une duree predeterminee superieure a la duree maximale des 
erreurs transitoires, ledit element memoire (24') etant prevu 
pour etre transparent lorsque les sorties du circuit logique et 
de 1' element de retard sont identiques, et pour, pendant que 
lesdites sorties sont distinctes, conserver son etat. 

5. Circuit protege selon la revendication 3, carac- 
terise en ce que ledit element memoire (24') est realise a partir 
d'une porte logique foumissant ladite sortie du circuit logique, 
cette porte logique connprenant au moins deux premiers transistors 
(MNl, MP2) commandes par un signal (a) du circuit logique et au 
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moins deux seconds transistors (MPl, MN2) commandes par le signal 
correspondant (a*) du circuit duplique, chacun des seconds tran- 
sistors etant comiecte en serie avec I'un respectif des premiers 
transistors . 

5 6. Circuit protege centre des perturbations 

transitoires connprenant un circuit logique combinatoire (10) 
ayant au moins une sortie (A) reliee a une premiere bascule (70, 
92) de synchronisation cadencee par une horloge (CK) , caracterise 
en ce qu'il corrprend une deuxieme bascule (71, 93) reliee a 
10 ladite sortie et cadencee par 1' horloge retardee d'une duree 
predeterminee (S) , et un circuit (74, 95) analyse des sorties 
des bascules . 

7 . Circuit protege selon la revendication 6 caracterise 
en ce que la deuxieme bascule (93) est commandee par la meme 

15 horloge que la premiere bascule, itiais par un front ou un niveau 
distinct de cette horloge. 

8. Circuit protege selon la revendication G, carac- 
terise en ce que le circuit d' analyse (95) signale une erreur si 
les sorties des bascules sont dif f erentes . 

2 0 9. Circuit protege selon la revendication 6, carac- 

terise en ce qu'il corrprend une troisieme bascule (72) reliee a 
ladite sortie et cadencee par 1' horloge retardee du double (25) 
de la duree predeterminee, le circuit d' analyse etant un circuit 
de vote majoritaire (74) . 

2 5 10. Circuit protege centre des perturbations 

transitoires conprenant un circuit logique combinatoire (10) 
ayant au moins une sortie (A) reliee a une premiere bascule (70) 
de synchronisation cadencee par une horloge (CK) , caracterise en 
ce qu'il conprend une deuxieme bascule (71) cadencee par 

3 0 1' horloge et recevant ladite sortie retardee d'une duree 

predeterminee (5), et un circuit (74) d' analyse des sorties des 
bascules . 

11. Circuit protege selon la revendication 10, carac- 
terise en ce que le circuit d' analyse signale une erreur si les 
3 5 sorties des bascules sont dif f erentes. 
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12. Circuit protege selon la revendication 10, carac- 
terise en ce qu'il conprend une troisieme bascule (72) cadencee 
par I'horloge et recevant ladite sortie retardee du double (25) 
de la duree predeterminee , le circuit d' analyse etant un circuit 
de vote majoritaire (74) . 

13 . Circuit protege centre des perturbations 
'transitoires, conprenant trois circuits logiques identiques (10a, 
11a, 10b) , caracterise en ce que chacun des circuits logiques est 
precede d'un element memoire (24a, 24b, 24c) a deux entrees 
recevant respectivement les sorties des dexox autres circuits 
logiques, chague element memoire etant prevu pour etre 
transparent lorsque ses deux entrees sont identiques, et pour 
conserver son etat lorsque les deux entrees sont differentes. 

14. Circuit protege selon la revendication 13, 
caracterise en ce que les circuits logiques sont des inverseurs 
et les elements memoire corprennent, en serie, deux transistors 
MOS a canal P et deux transistors MOS a canal N, une premiere des 
entrees de 1* element memoire etant reliee aux grilles d*un 
premier des transistors MOS a canal p et d'un premier des 
transistors MOS a canal N, et la deuxieme entree de 1» element 
memoire etant reliee aux grilles des deux autres transistors. 
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